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", 0x1000}], 0x8) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:26:50 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 21:26:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x80) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x7f, 0x0, 0x0, 0x2, 0x1, {0x1, r6}}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1cbb, &(0x7f0000000280)={0x0, 0x716d, 0x0, 0x2, 0x22e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d7d000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r8, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) syz_io_uring_submit(r2, r7, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4000, @fd=r8, 0x800, 0x0, 0x0, 0x6, 0x1, {0x3}}, 0xfff) close_range(r0, 0xffffffffffffffff, 0x0) [ 515.686113][ T20] usb 3-1: USB disconnect, device number 70 [ 515.775098][T20934] __nla_validate_parse: 2 callbacks suppressed [ 515.775119][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.791582][ T8] usb 2-1: new high-speed USB device number 71 using dummy_hcd 21:26:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) syz_io_uring_setup(0x5782, &(0x7f00000003c0)={0x0, 0x39d2, 0x20, 0x1, 0x219, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r7 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, r7, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000540)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4000, @fd_index=0x8, 0x6, &(0x7f00000004c0)=""/120, 0x78}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) syz_io_uring_setup(0x5f4e, &(0x7f0000000280)={0x0, 0xf2fd, 0x1, 0x2, 0x1c0}, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000d7d000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:26:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000280)=0x148, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 515.903386][T20953] 8021q: adding VLAN 0 to HW filter on device bond96 [ 515.915303][T20953] team0: Port device bond96 added 21:26:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 515.981818][ T8] usb 2-1: device descriptor read/8, error -61 21:26:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r6 = syz_mount_image$ufs(&(0x7f0000000280)='ufs\x00', &(0x7f00000002c0)='./file0\x00', 0x5, 0x4, &(0x7f0000000540)=[{&(0x7f0000000340), 0x0, 0x8}, {&(0x7f0000000380)="6b399bde726e2c2e8d349418508c78defd494b9b7ec3917f4791be4f78623eee9e4792296d55b1c5c17fd8d24a112cbb7ad7325d7cf403f2e98b1b6783b84b40a5f30adeb6fe8da87f1c0e8a1818e847186d35c18f2cbb9cf3485ebfefbf5d157470df4400e0b6", 0x67, 0x80000001}, {&(0x7f0000000400)="3503bb37c894c2f78a6da1679169aea63a1d98f96fa8cb03941fadd474244d758d34f1352407661de4963dc4f6ca2e2ba8bb30f88e4ba7137fd64a15e835c589c1f48e698510a1b29fd7ef76d12b91d35f4bdc6c9e607dd922db19a17d4efd504be9a7ba720bdb55036f55926c99527b97ae0916b8097dab458dc9b54dff1abb4483f592ede4c4a011ed1ddd", 0x8c, 0x6}, {&(0x7f00000004c0)="6b195efab30bd415d43afe6db0f1f0bc579a76cbc0feddef9316c5d2e99723fdcc6aefb8ade744b3af6dfc0335a1d4ed3f17e8d1975741ff118cf12a045f9a75a53a4dc0842ea85314a34ddc7b09558b6048", 0x52, 0x1}], 0x10, &(0x7f00000005c0)={[{}, {'/dev/net/tun\x00'}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/net/tun\x00'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ')#'}}]}) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) [ 516.103252][ T8] usb usb2-port1: unable to enumerate USB device [ 516.121477][ T9619] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 516.136385][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.181568][ T20] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 516.246273][T21000] 8021q: adding VLAN 0 to HW filter on device bond97 [ 516.264569][T21000] team0: Port device bond97 added [ 516.300680][T21010] loop5: detected capacity change from 0 to 264192 [ 516.322714][ T9619] usb 4-1: device descriptor read/64, error 18 21:26:50 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) 21:26:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'wlan1\x00'}) 21:26:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 516.379299][T21010] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 516.515033][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.575553][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.593426][ T9619] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 516.633278][T21052] 8021q: adding VLAN 0 to HW filter on device bond98 [ 516.684167][T21052] team0: Port device bond98 added [ 516.689987][ T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.731832][ T20] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 516.770575][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.781518][ T9619] usb 4-1: device descriptor read/64, error 18 [ 516.801535][ T7] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 516.813078][ T20] usb 3-1: config 0 descriptor?? [ 516.901749][ T9619] usb usb4-port1: attempt power cycle [ 517.023435][ T7] usb 2-1: device descriptor read/64, error 18 [ 517.291551][ T7] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 517.481494][ T7] usb 2-1: device descriptor read/64, error 18 [ 517.601671][ T7] usb usb2-port1: attempt power cycle [ 517.612695][ T9619] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 517.781738][ T9619] usb 4-1: device descriptor read/8, error -61 [ 518.051521][ T9619] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 518.221667][ T9619] usb 4-1: device descriptor read/8, error -61 [ 518.311552][ T7] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 518.341661][ T9619] usb usb4-port1: unable to enumerate USB device [ 518.481831][ T7] usb 2-1: device descriptor read/8, error -61 21:26:53 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="41d333f09d88ee26d4bd186161989aa7c127598ed37b6c66708fc819136c80719978cbbf5081b068d4415a9dceac38334bce99bcfad50d0c0bdb56e68c534d738930e18506854ee6a6b2e42eba71aba5efc3da75a3ff13bf143fd07aa1973bb27d6c52c580f3da3c13ecc79cdd16b514999c1d5f07cabf94d327958b6c462cce1fd15cc33586470cb8243e9dd231c43b107d2a37b448b4a533fdcf745e1b7bf4261272d72fcfdcfe4d96646e6b6613e4e5c18959f4844c58e82492f22383d273ecafe14a1e66462b5beebcc17d2d9cc55935dfeb13bc4142a30da54ef247", 0xde, 0x8000, &(0x7f00000004c0)={0x2, 0x4e24, @remote}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x208000, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000002c0)={0x2, 0x6, 0x5d, &(0x7f0000000340)=""/93}) close_range(r0, 0xffffffffffffffff, 0x0) [ 518.751743][ T7] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 518.774401][ T9619] usb 3-1: USB disconnect, device number 71 21:26:53 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21:26:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsu\x00', 0x400280, 0x0) syz_io_uring_setup(0x20fa, &(0x7f0000000480)={0x0, 0x3, 0x1, 0x0, 0x13a}, &(0x7f00001fe000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000003c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x80) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00003f2000/0x2000)=nil, 0x2000, 0x1000006, 0x50, r8, 0xa18e2000) close_range(r0, 0xffffffffffffffff, 0x0) 21:26:53 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x5) tkill(r5, 0x34) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@bridge_getlink={0x50, 0x12, 0x4, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x380b0, 0x14002}, [@IFLA_GROUP={0x8, 0x1b, 0x3f}, @IFLA_LINK={0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xec}, @IFLA_OPERSTATE={0x5, 0x10, 0xff}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_NET_NS_PID={0x8}]}, 0x50}}, 0x8050) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 518.931810][ T7] usb 2-1: device descriptor read/8, error -61 [ 518.977944][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.053899][ T7] usb usb2-port1: unable to enumerate USB device 21:26:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0xf13d}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x30, r6, 0x10000000) syz_io_uring_submit(r2, r8, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r5, &(0x7f00000002c0), 0x0, 0x0, 0x800}, 0x8001) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x7d8e, 0x8}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7c000/0x2000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 519.107541][T21125] 8021q: adding VLAN 0 to HW filter on device bond99 [ 519.138282][T21125] team0: Port device bond99 added 21:26:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21:26:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r5, 0x714f, 0xca99, 0x1, &(0x7f0000000280)={[0x8]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 519.244316][ T9619] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 519.344743][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.383046][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 519.438367][T21195] 8021q: adding VLAN 0 to HW filter on device bond100 [ 519.477043][T21195] team0: Port device bond100 added 21:26:53 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 21:26:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000003c0)={0x0, 0xffffffff}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000340)='/dev/usb/hiddev#\x00', 0x3, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x10}, r5, 0x1, 0x0, 0x1}, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x182, 0x84, 0x14}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r9, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x6593, 0x0, 0x2, 0x0, 0x0, r9}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:26:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1b) r2 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r2, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 519.571997][ T8] usb 4-1: device descriptor read/64, error 18 [ 519.611727][ T9619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.635120][ T9619] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 519.682895][ T9619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.730174][ T9619] usb 3-1: config 0 descriptor?? [ 519.858302][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 520.051534][ T8] usb 4-1: device descriptor read/64, error 18 [ 520.071630][ T7] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 520.172536][ T8] usb usb4-port1: attempt power cycle [ 520.211674][ T9619] ath6kl: Failed to read usb control message: -110 [ 520.218406][ T9619] ath6kl: Unable to read the bmi data from the device: -110 [ 520.226941][ T9619] ath6kl: Unable to recv target info: -110 [ 520.234399][ T9619] ath6kl: Failed to init ath6kl core: -110 [ 520.246682][ T9619] ath6kl_usb: probe of 3-1:0.0 failed with error -110 [ 520.257042][ T9619] usb 3-1: USB disconnect, device number 72 [ 520.268757][ T7] usb 2-1: device descriptor read/64, error 18 [ 520.541729][ T7] usb 2-1: new high-speed USB device number 77 using dummy_hcd 21:26:55 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) [ 520.731900][ T7] usb 2-1: device descriptor read/64, error 18 [ 520.734134][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 520.782417][T21245] 8021q: adding VLAN 0 to HW filter on device bond101 [ 520.809730][T21245] team0: Port device bond101 added [ 520.852202][ T7] usb usb2-port1: attempt power cycle [ 520.881545][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 521.051712][ T8] usb 4-1: device descriptor read/8, error -61 [ 521.071554][ T20] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 521.321506][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 521.466556][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.476706][ T20] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 521.488416][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.491950][ T8] usb 4-1: device descriptor read/8, error -61 [ 521.508757][ T20] usb 3-1: config 0 descriptor?? [ 521.574355][ T7] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 521.621826][ T8] usb usb4-port1: unable to enumerate USB device [ 521.752402][ T7] usb 2-1: device descriptor read/8, error -61 [ 521.981561][ T20] ath6kl: Failed to read usb control message: -71 [ 521.981600][ T20] ath6kl: Unable to read the bmi data from the device: -71 [ 521.981616][ T20] ath6kl: Unable to recv target info: -71 [ 521.982508][ T20] ath6kl: Failed to init ath6kl core: -71 [ 522.012261][ T20] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 522.022333][ T20] usb 3-1: USB disconnect, device number 73 [ 522.028371][ T7] usb 2-1: new high-speed USB device number 79 using dummy_hcd 21:26:56 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_mount_image$pvfs2(&(0x7f00000003c0)='pvfs2\x00', &(0x7f0000000400)='./file0\x00', 0x7a2, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000440)="e439b2100027237df04b", 0xa, 0x1}, {&(0x7f0000000480)="e85ab87754384b93a00264e0ffa553544c3ca8c1ea059e18323937fd8ebfebdd82756212519d9b8dc64153384df392eca10309eb0f5a173511492e80a980c26505606eeb475faad643d38ecbd8b82e590199a3001113", 0x56, 0x5}, {&(0x7f0000000500)="be0d1fa68fba690610669c1e08dbac8d9d8b953cdcdc8322d7d07f", 0x1b, 0x8}, {&(0x7f0000000540)="c58a7fb30b617aa5ee6c4659f9b6556d05a8d47e732ab986ad6b2fe4f819c99e317d1a58ec6624512f3838152ddc94800cd84fe3da54600870c60b3c948009f814e2a898f55ed9900f689d01439a07f6fdee3f0a1c25e6d23e2c2b2706cadd70d3dda4ff690878e72a270748105cd28087ec104bc7f4d702cd43dc8ad73f", 0x7e, 0x441}, {&(0x7f00000005c0)="e740f426f655dc92664d35c4de70a73ee41fea033ac9a4b1cdccf5828a0de8efb43a00351c769da42e64695fad4836f79535c62342b5", 0x36, 0x5c}, {&(0x7f0000000600)="c363cb30ce815bdc7e9df36dcab26a3076d1d8fa675d2b81ea9c2b56ce0aecb15579855ead2e92cfcd1d86e04f1fc480bb3056fc5b079e776a8019b9f3d84bd9294812a01b476e127e89f52faf541105e784241311437a1c1d4de1772604b7", 0x5f, 0xeeb1}, {&(0x7f0000000680)="233e7fdbda62015d36a98edc42e53a49d53eede3f783b892ba958589f344bcff7e54df82d58a7ced01843bbec4b66f6f8ac863dd83a920ab494dd58fc36da4b2520a95ff5d2b2e3a993999e3dd6922ad1552ab0c9adedf91a59b7d856f5a3a65a564cdba59088e9164a7719d002745343d2250160e39eb3c4eaf7e3a9f3beb8f2562933beab66f371ea9cc280cbe2209d859e562c2573f802781c7280ac0ee50f3cd83d7b49b500eecfc1fed626d3367f7ace51eebb6c317d43cda67037ed636d8d317", 0xc3, 0x401}, {&(0x7f0000000780)="ed7ead4f93e9f3a0bd600d8272a935a8fa31640b8323a50333620f3a924021c4c7317783ea631bf6b3bcdb2a58b2dfeafca9751ee7847738187edf", 0x3b, 0x7f3d}, {&(0x7f00000007c0)="a885eb40ff206511561c7acd7b7726b2c10fbac8032124db377d7b7109467f316040fc7a79e9345a7df11432bc1844093b8d970a578cda2d45ef59629f21cdabf6fb24ae5a6773af6675775e76fbfdf82d006ca34fa69ce130fd8e676e1d0d3d592b94e917f72f65eb0ca5f7253473473e75fde178176876b548170f0fc83325cb9bb3d2e1973e66b928fb8d460f192320da39c525835cb25806e2cf06bd6de7dccc88eb82900312f375c9f4d3809dbc8b55c62a9ae301d776a30bb54ca22c5a5e25a2fe3f0488e8dad2d992ac11b9f3963bd7b4f6434895ecebb2117220", 0xde, 0x9}, {&(0x7f0000001800)="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", 0x1000, 0x1f}], 0x1280040, &(0x7f00000009c0)={[{'/-\'-\\'}, {'rdma.current\x00'}, {}, {'%^$'}, {'+Y)'}], [{@smackfshat={'smackfshat', 0x3d, '/,.'}}]}) splice(r3, &(0x7f0000000380)=0xfffffffffffffffc, r4, &(0x7f0000000a00)=0x6, 0x545e, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x5b, 0x7148d6d37dbf9fdf) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000340)) io_uring_enter(r6, 0x4ab0, 0xcf76, 0x0, 0x0, 0xffffffffffffff96) close_range(r0, 0xffffffffffffffff, 0x0) 21:26:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xfffffffffffffffa, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {}, {0x2, 0x2, 0xee00}], {}, [{0x8, 0x0, 0xee00}, {0x8, 0x1}, {0x8, 0x4}, {0x8, 0x6, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r8}, {0x8, 0x3, r9}, {0x8, 0x3}], {0x10, 0x1}, {0x20, 0x2}}, 0xa4, 0x1) fchown(0xffffffffffffffff, 0x0, r9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000006f46b0e06c3c0ef900000000000400000000000000000000000000000000000021000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00abcdefghijklmnopqrstuvwxyz0123456']) 21:26:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 522.184257][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 522.206436][T21305] loop5: detected capacity change from 0 to 238 [ 522.218061][ T7] usb 2-1: device descriptor read/8, error -61 [ 522.264153][T21333] 8021q: adding VLAN 0 to HW filter on device bond102 [ 522.289122][T21333] team0: Port device bond102 added [ 522.352523][ T7] usb usb2-port1: unable to enumerate USB device 21:26:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 21:26:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000340)={0x0, 0x1000, 0x4, 0x9, 0x101, 0x7, 0x0, 0x8, 0x3, 0x8001, 0x1, 0x1}) [ 522.493468][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:26:57 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:57 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 522.541953][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd 21:26:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'batadv0\x00'}) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 522.630090][T21373] 8021q: adding VLAN 0 to HW filter on device bond103 [ 522.682264][T21373] team0: Port device bond103 added 21:26:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x7}, 0x473) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 522.741692][ T8] usb 4-1: device descriptor read/64, error 18 21:26:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 21:26:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'veth1_macvtap\x00'}) [ 522.933965][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 523.011806][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 523.032008][ T9619] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 523.091540][ T7] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 523.226548][ T8] usb 4-1: device descriptor read/64, error 18 [ 523.301697][ T7] usb 2-1: device descriptor read/64, error 18 [ 523.351979][ T8] usb usb4-port1: attempt power cycle [ 523.401812][ T9619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.412056][ T9619] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.421158][ T9619] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 523.439564][ T9619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.450354][ T9619] usb 3-1: config 0 descriptor?? [ 523.586307][ T7] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 523.781832][ T7] usb 2-1: device descriptor read/64, error 18 [ 523.902526][ T7] usb usb2-port1: attempt power cycle [ 524.061486][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 524.236698][ T8] usb 4-1: device descriptor read/8, error -61 [ 524.511512][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 524.611502][ T7] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 524.687065][ T8] usb 4-1: device descriptor read/8, error -61 [ 524.786899][ T7] usb 2-1: device descriptor read/8, error -61 [ 524.811731][ T8] usb usb4-port1: unable to enumerate USB device [ 525.066780][ T7] usb 2-1: new high-speed USB device number 83 using dummy_hcd 21:26:59 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:26:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'wg2\x00'}) r2 = syz_io_uring_setup(0x1b59, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xd2}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f000034a000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'io'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x2d, 'io'}, {0x2d, 'memory'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'rdma'}]}, 0x3a) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r5, &(0x7f0000000280)=0x80, &(0x7f0000000340)=@ipx, 0x0, 0x80000, 0x1, {0x0, r8}}, 0x7d68) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r2, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000003c0), 0x4) 21:26:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 21:26:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd=r6, 0x3, &(0x7f00000003c0)="89ba5b730f70a62d142e605b3c379feaefe6429df2fa0a434585d97a57f1e6529e5fee4bfa9f0a16f9bdc3b0ae6d156560abaa7b9da7b1e1230cf4c35962671a5aacddb2b3ac64d258f09ee922a17efb7170ff100028decb5c7d284b693c8558fd148e743cdeae48cd4761c8d23934b39702315dff0d2251a05b30d82aedae15b5a2ecd9358f5e4c839e18bed251bb61af6c41faedf80febb9f1114f272bbf1661731380a9a8df2b82", 0xa9, 0x14}, 0x8) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000d79000/0x4000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f0000000280), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 525.240014][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.250561][ T7] usb 2-1: device descriptor read/8, error -61 [ 525.323883][T21513] 8021q: adding VLAN 0 to HW filter on device bond105 [ 525.351316][T21513] team0: Port device bond105 added 21:26:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xf8, 0x321080) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{}, {}, {}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) dup3(r6, r4, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 21:26:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 525.372338][ T7] usb usb2-port1: unable to enumerate USB device [ 525.509086][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.558699][T21534] 8021q: adding VLAN 0 to HW filter on device bond106 [ 525.567781][T21534] team0: Port device bond106 added [ 525.581594][ T9698] usb 4-1: new high-speed USB device number 21 using dummy_hcd 21:27:00 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:00 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 21:27:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x7227, &(0x7f00000004c0)={0x0, 0xd2a0, 0x2, 0x1, 0xd4}, &(0x7f00003ed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0)=0x0, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x23b1, &(0x7f0000000280)={0x0, 0x4c83, 0x8, 0x1, 0x1ea, 0x0, r5}, &(0x7f000012f000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r12, 0x8010661b, &(0x7f0000000440)) syz_io_uring_submit(r9, r10, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r8, r11], 0x2}, 0x40) 21:27:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 525.675326][ T8] usb 3-1: USB disconnect, device number 74 21:27:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x5018, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x3, 0x13b}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0xd788, 0x10, 0x0, 0x37f}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x0, 0x3, 0x4, 0x0, 0x28, {0x77359400}, {0x2, 0x8, 0x7, 0x15, 0x2, 0x7, "858337c2"}, 0x2, 0x3, @userptr=0x3, 0x3, 0x0, 0xffffffffffffffff}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d7e000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080)={0x0, 0x49ef, 0x20, 0x1, 0x46}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d7b000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r9, 0x4b62, &(0x7f0000000440)={0x0, 0x0}) r10 = socket$nl_crypto(0x10, 0x3, 0x15) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r9, 0x0, 0x0, 0x37e, 0xa, 0x1, {0x0, 0x0, r10}}, 0x100) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4000, @fd=r5, 0x4ed, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x80000, 0x0) fcntl$dupfd(r0, 0x0, r12) [ 525.763910][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.811706][ T9698] usb 4-1: device descriptor read/64, error 18 [ 525.879802][T21603] 8021q: adding VLAN 0 to HW filter on device bond107 [ 525.907939][T21603] team0: Port device bond107 added 21:27:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) pread64(r5, &(0x7f0000000340)=""/4096, 0x1000, 0x1000) ftruncate(r0, 0x3) [ 526.082558][ T9698] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 526.141543][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 526.232469][ T4788] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 526.321675][ T9698] usb 4-1: device descriptor read/64, error 18 [ 526.451542][ T4788] usb 2-1: device descriptor read/64, error 18 [ 526.458250][ T9698] usb usb4-port1: attempt power cycle [ 526.525092][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.537114][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.550709][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 526.564188][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.574705][ T8] usb 3-1: config 0 descriptor?? [ 526.761491][ T4788] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 526.981536][ T4788] usb 2-1: device descriptor read/64, error 18 [ 527.102415][ T4788] usb usb2-port1: attempt power cycle [ 527.191536][ T9698] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 527.401781][ T9698] usb 4-1: device descriptor read/8, error -61 [ 527.701551][ T9698] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 527.841641][ T4788] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 527.891638][ T9698] usb 4-1: device descriptor read/8, error -61 [ 528.027267][ T9698] usb usb4-port1: unable to enumerate USB device [ 528.077465][ T4788] usb 2-1: device descriptor read/8, error -61 21:27:02 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) 21:27:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x2000, 0x0) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(0x0, r10, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x80) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r9, 0x8, 0x0, 0x40, 0x2, 0x0, {0x0, r11}}, 0x1f) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 528.343301][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.371781][ T4788] usb 2-1: new high-speed USB device number 87 using dummy_hcd 21:27:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'gre0\x00'}) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 528.435573][T21673] 8021q: adding VLAN 0 to HW filter on device bond108 [ 528.459674][T21673] team0: Port device bond108 added 21:27:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) [ 528.582167][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.621912][ T4788] usb 2-1: device descriptor read/8, error -61 [ 528.666399][T21731] 8021q: adding VLAN 0 to HW filter on device bond109 [ 528.674797][T21731] team0: Port device bond109 added 21:27:03 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) [ 528.721455][ T9698] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 528.742838][ T4788] usb usb2-port1: unable to enumerate USB device [ 528.762464][ T4788] usb 3-1: USB disconnect, device number 75 21:27:03 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) 21:27:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xfbaf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000340)='./file0\x00', 0x1ff, 0x2, &(0x7f0000000480)=[{&(0x7f0000000380)="1f4b09d5e10b21ec62821ca0291523633b35e97cfa44398b7f20406295e2206f1cf9b11156ca44de93d13977b06cf962996eba94f8a158fd12733ad4360194118d3d3361f2799a9f74baf53cd65e6bb9f187492e6225", 0x56, 0xa8}, {&(0x7f0000000400)="a401fac12ea9364ac2fbd27426e01af5bd8fda8b1fa575a4df1cad6bfa8dfca37df9b0f0affefbeb99f63b5e175784f7a2aafd0c99adcaf336c12d7db9a0d9500a8ad5359b35bdaae1049ffa35efd6ca1384c5e2ee767dd33a00feee", 0x5c, 0x2e}], 0x20c8009, &(0x7f00000004c0)=ANY=[@ANYBLOB='nr_inodes=5k7,fsuuid=eb8a84dc-ca69-c9fa-782e-ee4c3\fab,hash,pcr=00000000040000000011,\x00']) mmap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r6, 0xf1d23000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 21:27:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) [ 528.888468][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.925276][ T9698] usb 4-1: device descriptor read/64, error 18 [ 529.046217][T21769] 8021q: adding VLAN 0 to HW filter on device bond110 [ 529.074543][T21769] team0: Port device bond110 added 21:27:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x217}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 529.211486][ T9698] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 529.271984][ T36] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 529.341475][ T4788] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 529.441745][ T9698] usb 4-1: device descriptor read/64, error 18 [ 529.561974][ T9698] usb usb4-port1: attempt power cycle [ 529.592037][ T36] usb 2-1: no configurations [ 529.596783][ T36] usb 2-1: can't read configurations, error -22 [ 529.759754][ T4788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.770017][ T36] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 529.777803][ T4788] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 529.791607][ T4788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 529.800693][ T4788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.816827][ T4788] usb 3-1: config 0 descriptor?? [ 530.083259][ T36] usb 2-1: no configurations [ 530.087922][ T36] usb 2-1: can't read configurations, error -22 [ 530.095309][ T36] usb usb2-port1: attempt power cycle [ 530.296522][ T9698] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 530.491725][ T9698] usb 4-1: device descriptor read/8, error -61 [ 530.761537][ T9698] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 530.821875][ T36] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 530.976786][ T36] usb 2-1: no configurations [ 530.981596][ T9698] usb 4-1: device descriptor read/8, error -61 [ 530.987926][ T36] usb 2-1: can't read configurations, error -22 [ 531.118784][ T9698] usb usb4-port1: unable to enumerate USB device [ 531.141738][ T36] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 531.291753][ T36] usb 2-1: no configurations [ 531.296569][ T36] usb 2-1: can't read configurations, error -22 [ 531.306133][ T36] usb usb2-port1: unable to enumerate USB device 21:27:05 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:27:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/123, 0x7b}], 0x6) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d7e000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 531.498451][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000001340)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fcntl$setsig(r8, 0xa, 0x3a) r9 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x606280) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "823d4da88c82ba38bc2cc322e40934080b266ae5a6ca3cbafaf93605d604c704229c87bf29544655e497fa20412e639e0981447af0e6d523cf1060f171da6e4b528e1f6df6bc8ce8bb705ae44319e64ed385dbb2359555527262285ac7a2c3d8b04b5bcb946775842abf81285537f4594ddde0aef636d1891603260a20f593936a6bbfb7f936705c95141029a899bb678b269df50679c17f9ecc756588ad061e5dabe0e4aaef2e0f5103829a1ecbd0d096439cfcc6a0a9aa73306b41a985fc1203c8bfac440ca8cf594c41d48d6089dddd32991b842aa20a7c0cf66a71d95f01dd95e6b319722faced7a1981f5dc022dd7bacc6670936e8dc4746ba1faaa19df8f836c28b5c23f276cb26de2f139f7cef4d590c0b9620dead48741f21aea98d1c83c8f639fcecc1c92440095d948837b8c6f5c83802abfb73c8b5a74bbbcde7fd38e8abd3caedc8e2c71870eb65a4fe8185b42bc61555f5e513efa32c41934d2ebb3416e42f6d58e76c06591edb24ad05582defc762367371bc6715620fb7cbf787baac3922ffeaa01a69c99c356a5f6a5a40d84ea2ef1c023e946cd085c14188ba6025d494b2c80dfe8b716093fe342db74d1c8a1dad1643acacb682f799d94ae207a115def0f5a86e7eba75e017e34ab899d225c9016e8a1e7f82ad229c3b923ad6e7960b0b2036c8faae6f5be864aeb85d2c448efc709fb5571588fc03b319ec09998ab814f6027aa78228c0e17da4ba6ea05a5c9ef71e02ac7903765ed7913a320bbe188e7f8908405215e2dc8681ace0d2f0d341726557959720dfa9de21a68eaf3412f31d2e8857774c0271574f5324532547a0d30df46b52abf6971d2266504cf3e1b8e1b8a1560df3bf8223ff95599e7397eb1d087acc53c95b5b76d6ddc420850bd794cce15e6b28584998640bdf69baa6753cdba62980e7331a1f784c41204417617ad317dce8ae7efabe89e665837f29f9d9fe308437fb9cc18948e373f6530175efb24bcf220a023d3ea728fcf71482f78265eadf10b9df194e8a06b419659cdedabfcb211a0c48d914fdfc0a375f2213050d0e1f43394fcdce4f5cc6a7cb476fe190c7ef090245f91d2753abc6038552cc29192ec22a889211aa30b532e114d9848be22fe55f0c042caacacbfa5e58393640586ef77fbbd2ea5fe008127a13de004a16efb4e4f1027759de7ce5a87b0bcf5475426711ed907a4f7615afbf593a179e34d29a663b73866a7b625bd324b0562a3cc077bc9d4caea7c88b939b6059b441487419e84183043ddc960c3321074b6d8288aa26f63046c14cb7a324987f67f3e41714f68c31aba53c780735aa0d469eb2bb092a31bc2969ce0d59b2ec82e135f48993031049d6e176c33b689974e79c29513121c1de24b661d5362a146d97acdfa47b56242e7398daeef2bc54a8d109543801afdd9a61cf5e11dedc01fa20f3887f8fd73783eb758c7940b5786db39e3d8e71f09c1f43ff3f04c1a4f48afb3aa7d394b2327becca4402dafbe28353a30b74dd17fb47966781b251f559887fff3b06ce53582071a2bd0c5ca166946dc5a12c78a0f8b42c536377f7adcd611e39fbf77b38036b4534be16700c4e40582a3abdd600b50314b09c87207461a4396e7a8ee65a8913ce4b88ab8c66dcd2cf0be6efa4f9922fb4bacc7bca2f263e35d3c4f9d4ac984d8f99f5afecfac56b8d6c6f36c31b9da95401f5797bf8ee9bc5f7e4c0aeb8bc55bbbec36c70e1ae098b5c025842fe5e9710a4a5a74837403e31c8fa9479897b5a323095cb8fdcaf41394dc6509bbe6043a6cfea0b230a2dcf7bf8e64cd6709a9c244824e19108c5ebe85187c06b1ca8b0cccef982cc422b58200f5d5f98842dcac66cfc2619449c86e0e609c89d63db70f5e37e5d7877cacd432ed4158125f100359271b90174186e957e1e7e301e11166fde6954d7a411582535b4aa2ebeaa05db700f397b8cf0898a3768ce1203ca150575e9e10794d5d2dc4a4a200cd214e1bddf7c96d588ad97e491cd71fe923d7373ae53ab15a044ed2cd5fb9bc4960c09898337a224352af582ab162c0bb24d128cf5bfa55f3634ecf9b23ef99cfe9f1403df74515c90a944b5f2c85c7d3c055b0d743a56f7e13b524ad3d02c40948162d4fd3ab1da694e8b9bb45194bb7fc9b22b8ef848f0184c07452d64db5727e00be8d337f130dd17745e2ea3ef67183cc3f5f2458e948d9ba721eceb1ac38b568f92438224fb65b702f449609e815a525281384222502da23423c09a751eb1925f19d0c27119cd10abd69766d5b55ec052cf93b45085137e49622dfdae556791fc9bfc57aa1a4001d4f662b4269abaddee051a84c0de7017fbc4320b0d70547fa6ef4988c4ecfa183975e7bf27380819bb493f91ce9c3f012d971f989bc556b2bf1620baa05c7c34a2a2cdf2644cbd4a286cfcfb2f5fe1a6493f8ea281641f1d82474b1c2fa1ad868d073470050a5201a3d49056a4c5be34e2a33081aeb7065fd396961fc6cdc4b40a6e21b38515d2c4362d916904d100a7746f60be264153bd494c113ed533b583d963b45427e6e4c1441dee5ca3ea1f68ed7c42ef52a8237de872b95ec6603287270324452e192212772447eada6c3ba3f8dbfeddea17fcb4949316f3d1feff7eeb81fa1126337f05391f03dbf57b479c8c94ccd44d565ffae4aaf47545594aff669ae9ee58bb0e286ebb858f23fc45a821d453c25caac885a45af1409e157af6f8d1cdfa98714bd5759a5da6f13ca7b75b6859fd304d39085f4dbaf8a342a4ada6abb59dc8a9d66d229d8f8582446dd469e857781122f6b325a86c2676bc407b3070984cb4852e342308213c13c4877052d751648cd71f43cf8351273c2d7356297460a28030f489c371ea31256702b1e0d069cd881b21dc5dc955439d4a0bf62a2f759cc9e89e663a4f0bc69e1b68a28d8b92bdf12675f8c513923fb94493642ee034af6c8ebd7e8b6cbd1046b7ab94c20ad34085c29a84f7646f09b543aac73fbd3d838959e1bed0139b6ff3fa4af6c408e6c5785e138afe1c46f50cc292bbfabb38bc4b559313e0e6f07319d2f4f2115385f4a1e4118dcaa24daa7a89a3589c6b44e243a70d2b16dcad1390cbc7af2ab96c43095a039aef465cceb0ce4d538df2cf2fb29f1d9bc7e3020b8db6b0fe0fc49953f3304bc3091ee5399fd25632caccac8e02dc00d4c8402d3cf4e6c43c3f628b95cd1904c5137c80f6190ddcb0f63a8688ac84f0ca8d0f151fb37b3e90fd490d0c67e6f3a3afe43c9a8da1abb554aec2de1a35654a494ab484938ee04535b8c206f0d90610bd856b3b683b91f5b9c20ba7b8532829dd657a3705778976075f61d35662de8115117c73ee1b7ba602f3be58666886d0a288dd73dac5eb2f36a06b53d4dd073afaf1526093a97e145a786d1ebc5d1f67a8dc78fadf2c2b70283d9a8b546ed37b96aa35c6e35c5a1bf54598a41dd40698b2029d2816b62dac248b492f0a405ba1be3dd07f12804aa32114da8276886f3cb9e3225249f86ac9e84ad71c86128a0246cc684764d8b62798e9a2f21f0158ba8e8eae0925e57a78171e8ef928db61b53fb980cb427fedcd0e0d5d240708ee7a5f61238222c0c538294037c6d5d58d401847f7b8626818d53ca2e6d5b63e4416412f79beeefb76059dbc16e40100f88ae2a5713b30d3fa20c5cdf5869c1f0d2928deb17effffbbf4cd0b26887ec796f7ad2e9cb66478cda2fa6801f2044aec9202ff52a1eaf0cd5c766cb146738834e499f7dc6abdd6cc154eac3d254c63434179f6b7e08c0c5bfbaffd265e353255e47b3b1c223f72805a505cdcf71a01ed5ed843ca8c7e8ee11c26d8962e66a868fdfd111c526bb18d6d69621ed278ec0f3bc5599dc4695d770eac17ea42e09a035d58f0e83f14ecb4558520f7126219367ae9373f822a69cad77b1eee54d6308f136ccc392892d93e16e35bf0d2a035f68891dcdd11870a1f18867a40667e1aa3cdc0bc3fd4506014432af87ffa55e36155231a43757f235618a9d606da05f2014d3526590991353e30c24a3a29c001e5b0db1fd27612051039834163c29f90e410a5a9d4ca8cdcb0b22f5393c30d7f9223f6c24e50219319caec077469d8f7fe8c863f99e04386a6220b494adb7bd8d27e2f5e8c6fe9ae2bf1ce00b32e0e4283f0c6e532202c1e0205cdab94dea16d5c2349f5621199b8e897a9c2202369f892f26054c7a8a7ea34f40fe530fc86fd790b86ca84e71856d0b40dd4b5f3af8016fa2d17ca317de771d187092696affff1bc29c1fbc76b405cec831fbc5b813594cd252f0e12de7485b01d03b2fc38ecc93125f9e44fdeb07562a22c8afb230bd7b4b6725bffa1d1bd402d510cc6eeed575db0e30e79dcbb3a0c9df204f61cefe5b8119b61b84e254aef024cd815db6ebc8fdbd33f7eff1bbd455f5133630521c7257a5bdb24e60fc22e36e0657acb7e0b4381c92bf79b4204d9f2671a69a88abfaa6bee8aa0b84a78566dc2dd2aa82d1e3fabfffe88dbc98c43de223d4bec6463b523a089bd43e3cee1cfc3874f4d0b7bacdf7854222fd802df10e43413a648550941d6abc69a675bd30fabc4347e469a95f1c2f6a2a96546ab60c12ba484cbd20303533542cdd46c2f603b0a0256f2c190f0e4f8463dd9e321debd675bd8f5d47ce735e43b39fb9abd395016d66d6e946d10efab8ca1bf80ac98b332299491dab652324c50016c2deec4c0ff03e722379d0e5446c55d28e0595807a3ed50f23aa05e991223569100bf3d9514771f435adeff411d8c12190cc5fde0a1ae466a82195c14fbc2482d22a0a14023d398fbba5902577d623f051848988746e3857f4bdbffb1ad8c57bf953fd27261705d19dfe2c4af63f9d41e63123c64ace32cb97a436605098fce1a0a5e8e084bfd5dd2253ec506169bb2541d5223238616d0212c1146a442e0fed08a3222a4b73183386c4bdb9026dd69b42247ea7415ad3c6cd310c58ba34a394f9741f4abac978d574a01518fb31ee0e9c62a2013690844dae39876231514544fdfa0dd739c18b925192e6259578de41283448f698370cf0060f4c1d8984376d6b39081c9bfb9271d9d5180d72954a6e2103bb38ab4ae83fe2c64b4c885c4accf0a67627eae43dd52ae64625a507d73b37d93def9f0a5bca4107ffdfd63ebf097c919d9b0dcda9b0fabb8034064da82cd8fd4cd2c4b56ef70b060cb5e471f33ec4545a9954e25c0dcdcfcbf0e3b8a3791bc3331d7687e5032c1e17e2667b22f2f0d656f048a8851d94956269573f89b7b5f59afc17b412f14f79f9aa02afcab7472443298ae5184eb64adea729bee3303ba8ca94d0e5fcc42e2c83a5630ef27e20a900ab79ecdca4aac8f10b4148f13b593656421e7990be11c6da1db4"}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000d7d000/0x3000)=nil, 0x3000, 0x1, 0x4010, r5, 0x8000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1f, 0x0, 0x8, 0x0, 0x0, {0x0, r11}}, 0x2) 21:27:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x5) io_uring_enter(r1, 0x4c40, 0xf779, 0x3, &(0x7f0000000280)={[0x8]}, 0x8) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 531.582986][T21818] 8021q: adding VLAN 0 to HW filter on device bond111 [ 531.610943][T21818] team0: Port device bond111 added 21:27:06 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) [ 531.874719][ T8] usb 3-1: USB disconnect, device number 76 21:27:06 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) 21:27:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:27:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 532.064728][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 532.163963][T21905] 8021q: adding VLAN 0 to HW filter on device bond112 [ 532.256437][T21905] team0: Port device bond112 added 21:27:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r5, 0x0, &(0x7f0000000340)="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", 0x1000, 0x10140, 0x1}, 0xfffffffd) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 532.401487][ T8] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 532.423176][ T5] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 532.471811][ T36] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 532.527694][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 532.595301][T21939] 8021q: adding VLAN 0 to HW filter on device bond113 [ 532.604098][T21939] team0: Port device bond113 added [ 532.612181][ T5] usb 4-1: device descriptor read/64, error 18 [ 532.772078][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.782671][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 532.793496][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.794781][ T36] usb 2-1: no configurations [ 532.808164][ T8] usb 3-1: config 0 descriptor?? [ 532.821293][ T36] usb 2-1: can't read configurations, error -22 [ 532.881924][ T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 533.001497][ T36] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 533.071656][ T8] ath6kl: Failed to submit usb control message: -71 [ 533.078368][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 533.087080][ T5] usb 4-1: device descriptor read/64, error 18 [ 533.093551][ T8] ath6kl: Unable to send get target info: -71 [ 533.112961][ T8] ath6kl: Failed to init ath6kl core: -71 [ 533.123189][ T8] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 533.133616][ T8] usb 3-1: USB disconnect, device number 77 [ 533.212648][ T5] usb usb4-port1: attempt power cycle [ 533.332055][ T36] usb 2-1: no configurations [ 533.336702][ T36] usb 2-1: can't read configurations, error -22 [ 533.345181][ T36] usb usb2-port1: attempt power cycle [ 533.926397][ T5] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 534.071607][ T36] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 534.101649][ T5] usb 4-1: device descriptor read/8, error -61 [ 534.206871][ T36] usb 2-1: no configurations [ 534.211699][ T36] usb 2-1: can't read configurations, error -22 [ 534.361722][ T36] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 534.372212][ T5] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 534.511834][ T36] usb 2-1: no configurations [ 534.516457][ T36] usb 2-1: can't read configurations, error -22 [ 534.526358][ T36] usb usb2-port1: unable to enumerate USB device [ 534.542151][ T5] usb 4-1: device descriptor read/8, error -61 21:27:09 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) r7 = syz_mount_image$tmpfs(&(0x7f0000000440)='tmpfs\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0xa, &(0x7f0000000940)=[{&(0x7f00000004c0)="89578644c8abe777ebd68881a5253575887275782c0d6b5bfc53d395d7c466d727e42dab804c74", 0x27, 0x5}, {&(0x7f0000000500)="84ab6f67a13d36bf8321129f2b4650bbb6db03c1d067a9e9c92185d759837f2096e75fbfc09fbd2a6a0a6168f07b2b06b01b54e04bc773a782e14d641e979b0109787e80c7359d3da7b9bdf0b29f4c8fe174a0ec3a9c026a41e2fa2f9ae96acf965d1cbf8b45ed899089a7dbb00b0e6e5836e599d40bf05826f5995695a7a396eec5fbb34213660ef4749be2136f7c4b6436200f91f39eac92f21259e297ab43ba93a6f5b4c8bba70311b885323506d5c04f9e8ec404809efe41f177dc9f4462877ee9669121d88b99db708aea8471442732b41a3429122bb28654d419f6e1653c8996d1231efc204091", 0xea, 0x8001}, {&(0x7f0000000600)="4a4a23f3f34b5b8b34d47da0c8350bf2deb8ecc46ca975c3b81069eb11b90ae9", 0x20, 0x3092cbec}, {&(0x7f0000000640)="3bd622b95496db791e723c8a22b1ab9319e4946194c73b1d2048cf90e94767518c62e6d1fc3e6c23b03a8b89eac82d585aed936e530c329981af9a7f2a52c7e80b33ad7b8f0697", 0x47, 0x2}, {&(0x7f00000006c0)="e32ed50ff746eee4ff827ee3017f04402ff35f4e6df17442f4af38", 0x1b, 0x5}, {&(0x7f0000000700)="3281f65ed6743148c4211e36940bfd8f859d34ca62d9ac141ad015d101b788bce87064fcdab6519bed3ae9416b87635f6791cec05a5e6c63dd3f3a32f6891d8a9bb05f253221d32e67691e46035f89c3be1f825794f30d543f75489d7a7530cd8e2619f653fc86d0d291887eefc976a4f924e839977d18b99b7dfad6edc2d683bf5d25e6490bccc0f556fa6b5e3ace46bd4ca85a5c338b5ab9823f7c5e0c9f12cbc5feac11dbdaa42405e92760aa3351b84e591dd30a3f682a8ba4cce4bddd3f16f3390db52ae9ec7024d3e0fcaf799943", 0xd1, 0x81}, {&(0x7f0000000800)="d1ac1f55", 0x4, 0x9}, {&(0x7f0000000840)="606d411c2a0d60dbc89f634f6bf75605af84bdade9ed63e7f5bb5afa0f6ac2d2bf0a6857bbc6af66c4a01cd33bfa74de9eaacf866cdadc2746aa4a1f", 0x3c, 0xa4f}, {&(0x7f0000001800)="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", 0x1000, 0x5}, {&(0x7f0000000880)="8c21c04b4ac2de09e8db7ea1d546ee58964647d3fcb409e2cf801bf3143b441d824017da2fd6121888557d314fcdd27150eaa74d56560508146349d77297aa5d86069e44e12064ddf2049484d0f234e29adaf6655f5378094536e5591e10d25962c78251a9bf39290e9ad08cfe9a250ff5d13539e34eab00bc14334d4806ad4762e132", 0x83, 0x7b}], 0x8c000, &(0x7f0000000a40)={[{@huge_never='huge=never'}, {@huge_within_size='huge=within_size'}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never='huge=never'}], [{@subj_type={'subj_type', 0x3d, '/dev/net/tun\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x32, 0x33, 0x34, 0x63, 0x31, 0x34, 0x66], 0x2d, [0x37, 0x61, 0x61, 0x61], 0x2d, [0x65, 0x5, 0x31, 0x30], 0x2d, [0x61, 0x31, 0x30, 0x65], 0x2d, [0x61, 0x63, 0x34, 0x38, 0x65, 0x65, 0x34, 0x39]}}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) poll(&(0x7f0000000b00)=[{r7, 0xd000}], 0x1, 0x58) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r8, 0x0) syz_io_uring_setup(0x633c, &(0x7f0000000340)={0x0, 0x7400, 0x2, 0x1, 0x355, 0x0, r8}, &(0x7f0000d7b000/0x2000)=nil, &(0x7f0000d7f000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) connect(r5, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80) 21:27:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 21:27:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5eba, &(0x7f0000000280)={0x0, 0x18ce, 0x2, 0x0, 0x11b}, &(0x7f000047d000/0x2000)=nil, &(0x7f000059c000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r9 = syz_mount_image$erofs(&(0x7f00000003c0)='erofs\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffacb, 0x7, &(0x7f0000000880)=[{&(0x7f0000000440)="eb1ce023a1c1543ec1fcb401c4b679c9ff7ab58e6a289686c3d8f8ea6887a4f1810b0e38b40b819e8363620636798646a8fb5a1d2a27c6d0be879dc55a996cfc54cf4db77ebd80a2bdaf9a60bfa047b301a706703b77db543790fe7ee2469f8ec37672", 0x63, 0x4}, {&(0x7f00000004c0)="0707597c98a8ec54fd6cc29dfd340bd53e45603c2cb5ecfeffad6785c0109d1b17c96c22f1b48797fb09a7f80a2235ce0604315d78a5b66075544a5423b9e71284d3c89838c12c8e444dff7a6ed8a2b022af333c6daaedec84e552f3879c984d29d29785952f470c87e0b250318471842f86aa5d465230612b141378c6594eb5cd0d7703447b0ce7ad96c937853193442b8690acb34f6fe09eb3d53d36d54140c856ff1afe001ae8630b08fb84be86b33c9e540c3b1df481243bad72caa3ecbcc162855a2325e5e01ba432149a4d3e08629a522dfd256f1847ed1553ba99e1", 0xdf, 0x800}, {&(0x7f00000005c0)="dd3dd245cd105e5cdae11ff4a7200f91ffbacced04b2b80f6b48ef72d531015cb7c306c3e9f9865d24fa4472c36e35224394ee65f6ac752c2eddf02ee6c5b8e181eabae36255b53f4bdd85ff7f231618b6c47901a29e7c36b79cb21022f42c97cc76e9c10e7dc94cc10360d8d6c2ca628fb4cd7ae46ac7dd8689a64df3ae00b94f6aab2da0ccea4e3686e25d97af5716b382fb885134d5d14c", 0x99, 0xddb}, {&(0x7f0000000680)="01c5b08660cae1677900f818084bda58e426cc3ae92e423505fbe9e7dde6612e645eeba742790d2aa4ed737d4f796e9e21f9bc05d99b7e18ea7c83ccc47dd3a7446c1dfae80bcb182a21a1b1fb2b8dbd4a15512f01f09d0887a07c09d21313a04ddee34e117badc74b0e19db79bc7eff26838e0d125e9e9799bea69bc41f6ae26374c88ab0f9d3d09363573c0f946bcf88626c5ce8645b", 0x97, 0x2}, {&(0x7f0000000740)="6ebcb436b53413f288765d2a3a950699ffa83a851f054f9f0a7dcdb280cb1c89f13c5555d92f7bb59ae3519fe66b9f112db2dd50205dd1531b7ff980c317c7", 0x3f, 0x8}, {&(0x7f0000000780)="0522e6c5d203e0acff67b6ef6c3d3ee80217a2a8d4111f4652205b7a05aa8602dcd67e369365a9b3b94100bdbabaacc30b34937aa03a2d875c564b54c6bcc9", 0x3f, 0x3}, {&(0x7f00000007c0)="e9d66bc23855b501f639d0151193c0d33480052f2cbfcfa66a40356046db5f3cade5f8d9904c6e9dbad3c7f683ce5ca52e895e92f4c4427ca8955b878049bcd7105ca885e851d7221f2316687ac7c54c28023e84c47983e50a4249b1b2abd3b6b227bf00cddcad0661854c137f2ef4b8493758b4c77f69d5a075bf83b68872f12884b27e54c2774e179ac049a234a51cc2d372436c45754be47cdf30bffe24edc212cad655df41070de99bc3a40db8", 0xaf, 0x1}], 0x101080, &(0x7f0000000940)={[{@user_xattr='user_xattr'}], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(0x0, r10, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x80) syz_io_uring_submit(r5, r8, &(0x7f0000000ac0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r9, &(0x7f0000000980), &(0x7f0000000a80)='./file0\x00', 0x100, 0x2000, 0x1}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:09 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) [ 534.661716][ T5] usb usb4-port1: unable to enumerate USB device [ 534.751104][T21994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.837579][T22020] loop5: detected capacity change from 0 to 13003 [ 534.855805][T21994] 8021q: adding VLAN 0 to HW filter on device bond114 [ 534.903061][T21994] team0: Port device bond114 added [ 534.931972][T22015] loop4: detected capacity change from 0 to 264192 21:27:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 535.031581][ T36] usb 3-1: new high-speed USB device number 78 using dummy_hcd 21:27:09 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) 21:27:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 535.169333][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:09 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x91) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_setup(0x4a77, &(0x7f0000000280)={0x0, 0x9ddf, 0x4, 0x3, 0x324, 0x0, r4}, &(0x7f0000d72000/0xf000)=nil, &(0x7f0000d74000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r8, r10, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r6, 0x30, 0x0, 0x4, 0xb4b7e1b4b12f8fad, 0x1}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3400000014002120000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="08000200ac1414aa1400060000000000090002000000000000000000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@ipv6_deladdrlabel={0xb4, 0x49, 0x20, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x4fbd39b0c39e0999, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44050}, 0x20810) [ 535.261578][ T9545] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 535.288455][T22067] 8021q: adding VLAN 0 to HW filter on device bond115 [ 535.324734][T22067] team0: Port device bond115 added 21:27:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 535.451898][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.478466][ T36] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 535.535879][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.551746][ T9545] usb 4-1: no configurations [ 535.556811][ T9545] usb 4-1: can't read configurations, error -22 21:27:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x8035}, @val={0x2, 0x4, 0x20, 0x0, 0xd825, 0x2c0f}, @ipx={0xffff, 0x9b, 0x81, 0x15, {@random=0x4, @random="7fcef70816ce", 0x7}, {@random=0x20, @random="3620927fc52c", 0x2}, "ded6480ee0d93bec6b48d9b8c175be2457cdf3ca841183a8421ad2965689e0d136ec39bac14174c633cb5ff3f236602d8f97267bf57fe51ade86b2b45cd40cb7d96fb3f79f4e1d0fc830a707b83b7aafc63eeb0ffd827b22419c46e5d35df068dba617399a5b868aca385a5331e7b6967fd7b5634157f8f42a36483fd3"}}, 0xa9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'geneve1\x00'}) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000000400), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 535.596140][ T36] usb 3-1: config 0 descriptor?? [ 535.611023][T22115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r5, 0x8, 0x0, 0xc5, 0x0, 0x1}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$kcm(r9, &(0x7f00000007c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/41, 0x29}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/225, 0xe1}], 0x6, &(0x7f0000000700)=""/161, 0xa1}, 0x143) [ 535.742402][T22125] 8021q: adding VLAN 0 to HW filter on device bond116 [ 535.749155][ T7] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 535.757140][ T9545] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 535.793573][T22125] team0: Port device bond116 added [ 535.891815][ T36] ath6kl: Failed to submit usb control message: -71 [ 535.898860][ T36] ath6kl: unable to send the bmi data to the device: -71 [ 535.981556][ T36] ath6kl: Unable to send get target info: -71 [ 536.005943][ T36] ath6kl: Failed to init ath6kl core: -71 [ 536.025876][ T36] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 536.052207][ T7] usb 2-1: no configurations [ 536.056841][ T7] usb 2-1: can't read configurations, error -22 [ 536.064378][ T9545] usb 4-1: no configurations [ 536.065304][ T36] usb 3-1: USB disconnect, device number 78 [ 536.069002][ T9545] usb 4-1: can't read configurations, error -22 [ 536.081683][ T9545] usb usb4-port1: attempt power cycle [ 536.241670][ T7] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 536.521784][ T7] usb 2-1: no configurations [ 536.526400][ T7] usb 2-1: can't read configurations, error -22 [ 536.535249][ T7] usb usb2-port1: attempt power cycle [ 536.801519][ T9545] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 536.931718][ T9545] usb 4-1: no configurations [ 536.936511][ T9545] usb 4-1: can't read configurations, error -22 [ 537.091790][ T9545] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 537.221895][ T9545] usb 4-1: no configurations [ 537.226589][ T9545] usb 4-1: can't read configurations, error -22 [ 537.236027][ T9545] usb usb4-port1: unable to enumerate USB device [ 537.251589][ T7] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 537.381850][ T7] usb 2-1: no configurations [ 537.386476][ T7] usb 2-1: can't read configurations, error -22 [ 537.541535][ T7] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 537.675565][ T7] usb 2-1: no configurations [ 537.680303][ T7] usb 2-1: can't read configurations, error -22 [ 537.688273][ T7] usb usb2-port1: unable to enumerate USB device 21:27:12 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1819, 0x1e9d, 0x2, &(0x7f0000000880)={[0x1f]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)={0x2a, 0x4, 0x3fff}, 0xc, &(0x7f0000000540)=[{&(0x7f00000002c0)="9d49d3c5f90468c76a5175c06a5dc7", 0xf}, {&(0x7f0000000340)="1f23130cb4923de82638507ee2b8cfa2ce4715340d9f8b7c7e", 0x19}, {&(0x7f0000000380)="32002c7faf13f5c7bcbbb50fb70c9d0601c2436a81ad540bf05f1e04d42c615d5f7dc2d1e7caf368c8612be5f9038a4c78e470064418602a34068a7ac4d80c504f36b170d97b351bf56e2e69671300066385c407d0e3e7a2570e6209445a705cdba639ef7e6b687b6fe51d9a39e9930a482e53b20242bfbe225538a1ceb5597802d3d1c88274f127b433455d4684aa9f73970880c3e96019e86dfaed6488c31eea6041d166714ed394891d13051093c0087b21", 0xb3}, {&(0x7f0000000440)="ed0c35e8a5a765f234c422cddcdd282239dea6f3f236f961466aa08bf10a9caf0984b58d70b82a51f995d08223528b3792189157186f5699312fb53f906ea39b6e8d7ef9f67cb263629260e03a5ead3b71b0d21077bb26f1400556a370b72bfc6d890b9f45aaf57f06394de58fa1c42fd468f940cd85ec93aea1601d07da1d8c8549326929c5ad1af78710011eb9e2ba862f96e29985a82254e3410b665bbd7da6ec4a149099b247af781fa6afe3c4289fca2125066b2013765dc9f94ff9b5da9c86f52f73fd15", 0xc7}], 0x4, &(0x7f0000000580)=[{0x78, 0x313, 0x4, "6e1cab8144eab04b0c013827ca952d47b5b2db16197240eb1f5a34a825ca38e51d2ba1c558a8af012421438efa8f79dae601d425609cfac40e57599f044152d4eafd84e5e05eb48e6d31dd45f6e3c28ce22837f0700dfaed903388f2c4ad7f209bba7ea5"}, {0x108, 0x108, 0x3, "2a24df75d8ae761c8117161dd11824d4dddf1b80ee2b528b328fc99ce2505bced0e79beb201d6c423bc8a9943aa06bfd3648eb2e6367be343d306392434556f0753db03726fe319939dc70524ffdfd98d940e0a4ed01f8ee93cf225e183186d686e46e8a156fb24562a8002447a54f4db03b6311309118338f29402ada978270d5db8ccb37c3a84364e820146d01a0bd8209fa149f206a324677c67cef59bcfedecb15def626b75fdf1f7a75684c28d1f9b30bbd82befdbbca4f4d299f8e1882a5de1e0daa0d2dd417951ebe5b2c2104d8a82e990416e41fbf4ffcb0260ef97c4425a6b380f8d60712e8d3ca7861ef9557"}, {0xa8, 0x11, 0x3ff, "10b5e397df626c21eff491b3d3cb2333de6758f9a546517aa09c835269bcbe82c44ce9f7aabcf9a810653132268100954396c56f5cd9a688d026f1f7c83961be8c9901cdb96c3eba9af9d6c59448d2e8dd7786a5b4cd1fdac26cbe1733d2ec04b35f90f8ba7a3e512872a9c1a446dd850a728b2d2a5426b511dc3c5002eeab1ac7ab889b95cb05d56065812cd0f6c5176e4623d0f3e266"}, {0x98, 0x1, 0x7c00, "28b4f759a699c929114c2412ada040e931719c73cca4aaf4af1327b0fba1f09f62ef81aa5ec7ddef55b849b204754b9f2e17c285a9b3c947081cd4cb36478ee60336a20c29565cc07b7d61d49d8ee0b2425135c4e287531ee90cf243f71ddd0c0c6f790594927415c21c26bddaeec8b50b04327a98a392d7f40eb22e6de033dfa71a76da"}], 0x2c0, 0x8011}, 0x38) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 21:27:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b59, &(0x7f0000000080)={0x0, 0xfffffffe}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417d, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x3, 0x259}, &(0x7f0000158000/0x2000)=nil, &(0x7f0000524000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) mmap(&(0x7f0000710000/0x2000)=nil, 0x2000, 0x6, 0x4010, r0, 0xb95e6000) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x1, &(0x7f0000000100)=""/19, 0x13, 0x0, 0x1}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f00004a3000/0x3000)=nil, 0x3000, 0x1000006, 0x20010, r7, 0x8000000) r9 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)=0x60) syz_io_uring_setup(0x6db9, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x2, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(0x0, r10, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x80) syz_io_uring_submit(r8, r5, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x40002143, 0x0, {0x1, r11}}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:12 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) [ 538.037095][T22186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x616c, 0x20, 0x0, 0x21}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r6, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) [ 538.085536][T22186] 8021q: adding VLAN 0 to HW filter on device bond117 [ 538.094977][T22186] team0: Port device bond117 added [ 538.292754][ T7] usb 3-1: new high-speed USB device number 79 using dummy_hcd 21:27:12 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00"], 0x0) 21:27:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 21:27:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) fcntl$dupfd(r5, 0x0, r4) [ 538.417339][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 538.441493][ T4788] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 538.560554][T22250] 8021q: adding VLAN 0 to HW filter on device bond118 [ 538.587742][T22250] team0: Port device bond118 added [ 538.654640][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 21:27:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35, 0x1}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 538.703071][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 538.723290][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.747273][ T7] usb 3-1: config 0 descriptor?? [ 538.756759][ T8] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 538.771737][ T4788] usb 4-1: no configurations [ 538.776875][ T4788] usb 4-1: can't read configurations, error -22 [ 538.781127][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 538.880336][T22334] 8021q: adding VLAN 0 to HW filter on device bond119 [ 538.940246][T22334] team0: Port device bond119 added [ 538.961878][ T4788] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 539.041665][ T7] ath6kl: Failed to submit usb control message: -71 [ 539.048350][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 539.064586][ T7] ath6kl: Unable to send get target info: -71 [ 539.073836][ T7] ath6kl: Failed to init ath6kl core: -71 [ 539.089187][ T7] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 539.099581][ T7] usb 3-1: USB disconnect, device number 79 [ 539.139719][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.165601][ T8] usb 2-1: config 0 has no interfaces? [ 539.171179][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 539.209509][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.235814][ T8] usb 2-1: config 0 descriptor?? [ 539.289681][ T4788] usb 4-1: no configurations [ 539.295604][ T4788] usb 4-1: can't read configurations, error -22 [ 539.308117][ T4788] usb usb4-port1: attempt power cycle [ 539.475070][ T7] usb 2-1: USB disconnect, device number 100 [ 540.027339][ T4788] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 540.191790][ T4788] usb 4-1: no configurations [ 540.196434][ T4788] usb 4-1: can't read configurations, error -22 [ 540.361673][ T4788] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 540.521637][ T4788] usb 4-1: no configurations [ 540.526293][ T4788] usb 4-1: can't read configurations, error -22 [ 540.535930][ T4788] usb usb4-port1: unable to enumerate USB device 21:27:15 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000111000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x10004fa2, &(0x7f0000001740)={0x0, 0x472a, 0x1, 0x0, 0x0, 0x0, r4}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f0000000480), 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000007000fedb023500"/20, @ANYRES32, @ANYBLOB="00843626fc0004000000c01d070081006d71000008000100647272000c0004000000000000000000"], 0x40}}, 0x851) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000440)) ioctl$GIO_UNIMAP(r5, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) copy_file_range(r5, &(0x7f0000000240)=0x2, r4, &(0x7f0000000400)=0x7, 0x5, 0x0) 21:27:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000002c0)=""/56, 0x38, 0x18}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000280)={'xfrm0\x00', 0x7}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x82, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x67f}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000090}, 0x810) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 21:27:15 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:15 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00"], 0x0) [ 541.228264][T22373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x3ff, 0x101a80) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000642192d800"/296], 0x23) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 541.332073][T22385] 8021q: adding VLAN 0 to HW filter on device bond120 [ 541.367206][T22385] team0: Port device bond120 added 21:27:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg(r4, &(0x7f00000004c0)={&(0x7f0000000280)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="9ad62266af652f6aa3b5756f40082442b990aa68dd69488f8df2a61b2b800183b3efc6e709501fce27cbd435a3fbef66419f5504e7c81d346376366eac1385ba5003830794a9ec0590c7c1e63c59c9587bcbc2db1b855691ab6db9359a52e67d5aeef14231cd01cf2f2457d9453567324e18348a5b6d81c0050be3bf746678bf4f199ce23a", 0x85}, {&(0x7f0000000400)="3b1d6476dc5a179aede2b0477db6ad0a0ab2fd3620d16c9cf33968cbdf53b302337987598f4e3a4b1fa857d8758e64acc7733e38733584b8201b62d9b56ec637322badc0217dd29d01617f1fcf587b6b2da2e4", 0x53}], 0x2}, 0x24008094) 21:27:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 21:27:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88200, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000280)=0x2, 0x0, 0x4) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_uring_enter(r9, 0x3aa3, 0x56fb, 0x2, &(0x7f0000000340)={[0x3f]}, 0x8) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000000380)={{r11}, 0x0, 0x10, @unused=[0x10000, 0x1f, 0x401, 0x42b], @name="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"}) [ 541.501805][ T8] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 541.541686][ T4788] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 541.581540][ T9545] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 541.615332][T22437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 541.778311][T22441] 8021q: adding VLAN 0 to HW filter on device bond121 [ 541.818319][T22441] team0: Port device bond121 added 21:27:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000280)=""/56, 0x38}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 541.901819][ T9545] usb 4-1: no configurations [ 541.906768][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.922223][ T4788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.925640][ T9545] usb 4-1: can't read configurations, error -22 21:27:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 541.957202][ T4788] usb 2-1: config 0 has no interfaces? [ 541.975622][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 541.983557][ T4788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 541.997291][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.029094][ T4788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.043044][ T8] usb 3-1: config 0 descriptor?? [ 542.106448][ T4788] usb 2-1: config 0 descriptor?? [ 542.120915][T22490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.157189][ T9545] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 542.265779][T22504] 8021q: adding VLAN 0 to HW filter on device bond122 [ 542.314912][T22504] team0: Port device bond122 added [ 542.385655][ T9698] usb 2-1: USB disconnect, device number 101 [ 542.471759][ T9545] usb 4-1: no configurations [ 542.476475][ T9545] usb 4-1: can't read configurations, error -22 [ 542.508257][ T9545] usb usb4-port1: attempt power cycle [ 542.551869][ T8] ath6kl: Failed to read usb control message: -71 [ 542.561133][ T8] ath6kl: Unable to read the bmi data from the device: -71 [ 542.585492][ T8] ath6kl: Unable to recv target info: -71 [ 542.601276][ T8] ath6kl: Failed to init ath6kl core: -71 [ 542.620333][ T8] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 542.643890][ T8] usb 3-1: USB disconnect, device number 80 [ 543.271579][ T9545] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 543.417780][ T9545] usb 4-1: no configurations [ 543.422652][ T9545] usb 4-1: can't read configurations, error -22 [ 543.581620][ T9545] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 543.711611][ T9545] usb 4-1: no configurations [ 543.716294][ T9545] usb 4-1: can't read configurations, error -22 [ 543.724370][ T9545] usb usb4-port1: unable to enumerate USB device 21:27:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) finit_module(r4, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x118, &(0x7f0000000280)=0xffffff0f, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x240840, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2c89, 0x9231, 0x3, &(0x7f0000000340)={[0x20]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000726000/0x1000)=nil, 0x1000, 0x1000008, 0x50, r5, 0xaddd9000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) mmap$binder(&(0x7f00005f6000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0xfffffffffffffff9) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f00000002c0)=0xfffffffb, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:18 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21:27:18 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:27:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00"], 0x0) [ 544.348724][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) io_uring_enter(r1, 0x5037, 0x936c, 0x2, &(0x7f0000000280)={[0x5]}, 0x8) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f0000000340)="e270f96a1e1c8e1cf94c995ba0ad7edf15b22952a6760b3d419283cf15d25193089c01102279a5abe9f06b6091cc40ff8297a2923e10208901c596db655a8348a4dfde33d7c5fd515f3d2b10fc7ab3e67b25b93e1e1fd20212342a4143c22d75ee8794c0df5dc93957fa47a92f9a567fb744d2512454db5eb7be07a72e6a1a8818b8fd46d714bdabf0b3fa394ba724", 0x8f, 0x2800c040, 0x1}, 0x2) [ 544.465127][T22581] 8021q: adding VLAN 0 to HW filter on device bond123 [ 544.475951][T22581] team0: Port device bond123 added 21:27:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) [ 544.669977][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.681772][ T20] usb 3-1: new high-speed USB device number 81 using dummy_hcd 21:27:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000280)={'veth0_macvtap\x00', @link_local}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40600) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syz_tun\x00'}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 544.741672][ T9545] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 544.761518][ T4788] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 544.781055][T22639] 8021q: adding VLAN 0 to HW filter on device bond124 [ 544.825693][T22639] team0: Port device bond124 added 21:27:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 21:27:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x200000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r6, r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r9, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 545.062847][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 545.081957][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.110357][ T20] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 545.131888][ T9545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.151511][ T9545] usb 2-1: config 0 has no interfaces? 21:27:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {}, {0x2, 0x2, 0xee00}], {}, [{0x8, 0x0, 0xee00}, {0x8, 0x1}, {0x8, 0x4}, {0x8, 0x6, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r7}, {0x8, 0x3, r8}, {0x8, 0x3}], {0x10, 0x1}, {0x20, 0x2}}, 0xa4, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, r8}, 0xc) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000280)=""/107, 0x6b}], 0x3, 0x0, 0x0, 0x80}, 0x1) write$binfmt_elf64(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/1155], 0x483) [ 545.164329][ T9545] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 545.173638][ T9545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.184845][ T9545] usb 2-1: config 0 descriptor?? [ 545.217755][T22684] 8021q: adding VLAN 0 to HW filter on device bond125 [ 545.235426][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.255620][T22684] team0: Port device bond125 added [ 545.271878][ T4788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.301033][ T4788] usb 4-1: config 0 has no interfaces? [ 545.331985][ T20] usb 3-1: config 0 descriptor?? [ 545.341690][ T4788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 545.375920][ T4788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.410608][ T4788] usb 4-1: config 0 descriptor?? [ 545.425445][ T9545] usb 2-1: USB disconnect, device number 102 [ 545.841615][ T20] ath6kl: Failed to read usb control message: -71 [ 545.848103][ T20] ath6kl: Unable to read the bmi data from the device: -71 [ 545.881686][ T20] ath6kl: Unable to recv target info: -71 [ 545.890830][ T20] ath6kl: Failed to init ath6kl core: -71 [ 545.903978][ T20] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 545.915027][ T20] usb 3-1: USB disconnect, device number 81 21:27:21 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000204000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(0x0, r10, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x80) syz_io_uring_submit(r7, r9, &(0x7f0000001880)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/80, 0x50}, {&(0x7f00000013c0)=""/221, 0xdd}, {&(0x7f00000014c0)=""/173, 0xad}, {&(0x7f0000001580)=""/131, 0x83}, {&(0x7f0000001640)=""/204, 0xcc}], 0x7}, 0x0, 0x40, 0x0, {0x3, r11}}, 0x5) 21:27:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{}, 0x0, 0xc, @inherit={0x60, &(0x7f00000024c0)=ANY=[@ANYBLOB="496b09db73ba867103000000000000003a83c835000000000300000000000000200000000000000008000000000000007f0000000000000001000000010000000300000e000000000500000000000000050000000000000700000000000000895b0ad5d5a01c1f1df6d7c29104ab81f5ac61847ba18f7e6144b21482e4a5867ca15687f55678fa26f3b49a4b809261ef8864d046f5c335c0b3f3b2d9f236074e038595f2984ef66c6ba88826394d701dd12eae532c3b335aa0fab0aaa41396820201167996c66309b6cacbc63ae59cd3e6907047591190a6d94cb2370500d2813978cae54ac9d2802ac88940232070e78416f0bb859efd6e08258c967c4f5e25cf59cadbea5a5468d2eee114fc09b87b3ae4909dd914cbab983f7187de4a1b0affffffffffffff5b7f882e13598b600000000000f8f8d77c4a991323264abc81311611b5b65126159c8cc79a62bcf9002e8a8b296803879d4f4988c0b82edac96a0d48032fb763162578c255b7d62363dabe4d9d10b9b44381536f614c53391709e78b0d2775b3f14332dbac"]}, @name="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"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYBLOB="bd70000400000000000000080002149ae1b57c95a5296b0000dd01000100"/48, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f8378af0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f730d800a841d1cb0c79e8435815ff0f"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002a40)=ANY=[@ANYBLOB="ba01000015e902e73ab82083271a850455e66e48f8ab6340fbf34259671d74010000000000000021964771a5daf364daf34a7bc1bdf18c4ba9d5f8199775863f84c471d71975672ce83820e109d40ac49511d4cb9a1fdb1d41f552acacdf08752840baf9b3248f853c3a0866b8c8db05c01d17468f1c570200000000010000001c4f47acc100a4918dfce089dd08d527ffcb2f6588d51a8e89ad3e61a114bd7bd354865812ad283fc8eee46cb7fd999c5bed57fa62b96cf1e1ffd3fd462a0354b2269bffb6fd8ffa67563905911ac7934dcf1863f7c6cdb3674521bb7b878c88a057ed339f9310f7db66cd1e19dce0a1b4d455511b70647dd7e8142f71bdfc69552f0883880ff0dccd51b95504d22279135b3d9486fefee05f71250da37f4f3f14f504e1c46cb6a2cbf6fc70aca58b97e76ed44000000000f3dfbfee8023f99be68e76782d479b9f7d26ddef0e6adae305b9aac8055180ccf555d429e58a7aba6df0291b88237fe41e711942095e8c02e26a22675bcc54300094a1af5c7d574b4f04db9f71eddad711c00c24e90f8f90866300f81ca06d66f4b17915fef24a7a6b8e7c1e80d3b8dffff2c96c77a578875c793445ffb3ec7ca8696d288552e6df1039c48e4ceb77f51b14127fcc001cc3248744d462b43d48cba20ccc3d40be923594a7b65b737fb9983a45164b8f701996c7d1d0886f604d179149c2deb908000000e3006173372860f0c57226fba67d795b32fc319e249decc96657262da45daf55a12498f89cfc28bf467bad22a66ecfaf09840aa258d959a42ee6a36ca09b6f0ef02956062cd8c26ca528b6ad3c47b0115544563560be31189351c2dbb153b503b95d9a1c14d6b47c56c8f73ecb7a2fb30987e875ee8d3db8313c2d5d44c52572d1d26bef337d124317d05f5ab8b73d8719e90bb9a4f37f52f4d6f329da7df5f4c9b3b56b40e7d91a84b639d42437fcd2f200dc2df0fdfe4c8354dce9d1d5565d70468ec03590129fd8e085124af8d0d77231b001d69c3ee47dc7473d35feb63a550254554ed34f8a9d1193cdd29151dbb497073d32dce253d3471845686f554727eaaa49c3c08e565beb8121056a6425bd11ec981056296f86f0b362cfaff3f6d1380d3b8781f4055dd2d2296ca388968eb1e1857ca2f9d21503e2afbe135ff6f1007335e654aab737fa30b53d5c1dfde1ff807812ae87330c2ddc7d87e693c0fee2f45d61b8ce1f79b1033ef81a5515a0edef3c4b46c0476714c6bafc2d2165022889715c84c87fe1244e944675c2edc8dfb56e11cea2d1b0927bea4323", @ANYRES16=r9, @ANYRESDEC=r7], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000580)={{}, 0x0, 0x12, @unused=[0x9, 0x0, 0x7f, 0x20], @devid=r7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000020c0)={r7, 0x9, 0x3ff, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000340)={r7, "1a9b2dd1f5e163e4963b7e2cf1c8f7f5"}) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 21:27:21 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000"], 0x0) 21:27:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 547.423153][ T20] usb 4-1: USB disconnect, device number 45 [ 547.527567][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 547.593559][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 547.652265][T22750] 8021q: adding VLAN 0 to HW filter on device bond126 [ 547.678935][T22750] team0: Port device bond126 added 21:27:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0xfffffffe}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f000073e000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 547.703300][T22791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.726699][T22791] team0: Port device bond2 added [ 547.754686][T22754] device lo entered promiscuous mode [ 547.812040][ T9545] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 547.932413][T22833] Y­4`Ò˜: renamed from lo 21:27:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) [ 548.041519][ T20] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 548.187890][ T9545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.207875][ T9545] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.221825][ T9545] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 548.231218][ T9545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.242701][ T9545] usb 2-1: config 0 descriptor?? [ 548.308945][T22841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 548.431812][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.440853][T22843] 8021q: adding VLAN 0 to HW filter on device bond127 [ 548.447867][ T20] usb 4-1: config 0 has no interfaces? [ 548.451106][T22843] team0: Port device bond127 added [ 548.455390][ T20] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 548.469378][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:27:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) recvmsg$kcm(r6, &(0x7f0000000d40)={&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/162, 0xa2}, {&(0x7f0000000b80)=""/236, 0xec}], 0x4, &(0x7f0000000cc0)=""/95, 0x5f}, 0x40) ioctl$sock_bt_cmtp_CMTPCONNADD(r8, 0x400443c8, &(0x7f0000000d80)={r6, 0x90}) ioctl$GIO_UNIMAP(r7, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) ioctl$TIOCSCTTY(r7, 0x540e, 0x6) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 548.486520][ T20] usb 4-1: config 0 descriptor?? [ 548.500183][ T9698] usb 2-1: USB disconnect, device number 103 21:27:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000280)='\x00', 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) [ 548.712873][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 548.822509][T22914] 8021q: adding VLAN 0 to HW filter on device bond128 [ 548.834067][T22914] team0: Port device bond128 added 21:27:25 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 21:27:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 21:27:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000"], 0x0) 21:27:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'batadv0\x00'}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x11c, &(0x7f0000000280)=0x2636, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x402cc0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000019c0)=@pptp, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000000500)=""/149, 0x95}, 0x2100) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0xf6) syz_io_uring_setup(0x6dbb, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x35}, &(0x7f00007b1000/0x2000)=nil, &(0x7f00003bf000/0x4000)=nil, 0x0, &(0x7f00000002c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x80) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000001700)=""/47, 0x2f, 0x5, 0x0, {0x0, r8}}, 0x800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r10, 0x0) syz_io_uring_setup(0x4fe0, &(0x7f0000001740)={0x0, 0xfffffffc, 0x28, 0x4000, 0x400, 0x0, r10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 550.601169][ T20] usb 4-1: USB disconnect, device number 46 [ 550.702214][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:27:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 550.883284][T22976] 8021q: adding VLAN 0 to HW filter on device bond3 21:27:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="585cfe8919663e50bb68e18cd05ab218d3bc33f06b4141ed6612ff309d4d2843d9f1be9f2a90517b66aa7d663b3529f0affdb4555c23253a1c43149be7636c961b1d607ee64880a8026598d7d1893a58c1fb0805cbee675822cca673aba212f59ac89b8e2e1e3b118bcc9ac9cbf57859594bcba43bec48eaa6774834b6be6ab088590135f036a87f73df0097", 0x8c, 0x0, 0x1}, 0x1f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = fsmount(r3, 0x0, 0x70) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r3, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1, &(0x7f0000000440)=""/42, 0x2a}, 0x0, 0x146, 0x1, {0x2}}, 0x6) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 550.937295][T22976] team0: Port device bond3 added [ 550.971807][ T9698] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 550.974000][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:27:25 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) [ 551.109419][T23034] 8021q: adding VLAN 0 to HW filter on device bond129 [ 551.161687][ T20] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 551.170825][T23034] team0: Port device bond129 added 21:27:25 executing program 5: ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000280)={'batadv0\x00', {0x2, 0x0, @loopback}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xdb}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000d7e000/0x2000)=nil, 0x2000, 0x2, 0x4010, r5, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3c85, &(0x7f0000000340)={0x0, 0x542c, 0x0, 0x1, 0x312}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r8, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index, 0x0, 0x0, 0x0, 0x1a, 0x0, {0x2, r7}}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0)=0x0, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r9, r11, &(0x7f00000016c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000003c0)="0f7346e2414da396df1b9cd6c06217ea9e53c4", 0x13}, {&(0x7f0000000400)="795600123ad798748a0805770c9b5a1927a442e3a69cfe4700376470667321db68ef0a0e879a4d842fd18b86a19a76450787d8c6a52df4e2e65f442765c865a0f56f079df1d25e546ea4ab4681f83b9d262cabeb089400bf0660f7d568c8d7d82bbcff9dddc994e6399b9f1b52101258ecb28484f06dc9390b2af10052ac764829962518de01e87e49aa276e6b41f655d86a471e1ea89260e0a6d27b090464d8fe6865cc2fc0884a8b448b8995159f13502a7eaedbd89a92d91c56205d84d6607b8bd7bbdae650f4441ddc095c9879ec6a7ca61d9d2b6ad55f41b39febbd7cbfe37b190dcdefc0d840a131eebd02ba461b5560425200de276f363b0a943266960b57c02fbc19a09cdb96b93dee740935b8c7ba7ae5bd1b24ab8ee8b76d6a92f00b5068c17258a6ff7ab659431b6c1e0f514ab9b37fd99dd94c7890671b7c0641c461f7d5eb5819533df6ef5e7ba176b48cf15ccabb3ae23710921adc16d2a87ccec12e33af87f03756405e8dc5117de3fbe42fa6c0e484cb40e49aae5b2d0e0f334d23012e434f6dd59d162b66197e8d4f4e5cd4244e57a8cb2e9d94baa07b67370b6c490ab4e599f3659da35779aa0817604e52107b1e53b51f804c76b9c4508d95a964b6aec796ee2f90dda6315dcc6ff8a11a947f64f253ac7eb1be103f99e571e849d9aa56431541951f98db03c883ba756ae741e0be6c118520153852cd49472f1e058defec229c9465aed1a442d679b0f5ddf6abeeb16ab1990da9fbeb6bb28dc05267e90c5faf9b119838312b61eb6877345cf1586a81fe5ea98ab778dbbba36d1b718816ed5becd7495dcaa9d7a37c94acabbb303edc49b3606006f00a8d0496a154ae6c401609277770ecd02011a4d4d0adcff06ebbb0c501e6ede6d205f2b6410d69b39dcc6a3b49d17215970b13c92f222636cc19c57bf3cbba73fc57eb4da682a3c54d77751e8df63ea294e3f675dd0a74ecf9ea3a066b2f51d6c417fd2b1ca46258ee553ad35d8911b103111a99d27fe7d2c0e02fe2891c7a866395107f1b7cfdae9d7b1beaf2b46618032c8f06f26b0b37e9e8bd9f24fdb40230e887a52a708b6c02f79a1a35b44ca3f7c8f50af79f20c80879bcf1ea85321fcdad348adc2debf00b8e740e318795666711cf2aecbd3d494e134f87cf15f714a77bf83666f43532fa9c6fbc6064d1d2ce3bfdf56dfa98f84d28668009b0f3d50097d339ad4d4797c6f81938286a95beb8c507e953bd785afa28cd77910961f72089d2172c77ad49a7c7fecc311ff53e308bb9718fdee7b52c2e3385b8501336768fe1fe224876642cbb77411c6a8047655821a78788bab45767538bf136720d63c217a6fdce42ca2c5878ff17e9124dbaf3bdbe10a170a33c890496006b9844fe261348dd21ecbd70d60b96fc07a9c9d5c06935ce7325c9dd3b0fd68a6e1b9e2370769abbd805fe9c868b1518cf05cc637e3b972049c3418b834411d4fa05d939a02dabb9bf350ff7995662224752a1186fc8c80941203f9d893f321f71207bd7505ba9d54200528be433e862d2de7ace1de5df7747b3a2437fbd85f5b3311a19fd5a02835ce7ba94e18e1452aef2c94eb18db030593bf902789127e12455007145865a513dc9d70a963a66afc235c3e2890007741ecf18caa526a856e998d1f9d4f8d5e318f5d51118057de382f9eadaf3238daadd78b440766fd8a1235b8bd46aefc3fb36f5fbca618ecbfcdd06931e0897e853ccbfb085dd1d7ae504cfe552adaafecc79550d70a7c54e687381304f12f0426b0457b9d73651ff62b67ba621c00d10b772387240525a9ccdc910af821ae554a52fc4ffe9d78cf7446aa5cae361aa573c83a2b296c556a19ae5ab08eb533aff2aa192f6f0277be07f9cceb53629efe34407f0bebab87332e6858923a867574d15e07aea3a488357e617d50e6255c2104f03b3b59ade9af239415628e20e0851a1a425ef3450d2799a84cdc077833b69de1b4946877686c2ae778abc12417072178e8618ea5a1d097ca6d7dc3fdabf67fcaa50cab43a61870d27bb660cf7ca66cf7b1042fe77990e2dd658fa82ad2cd0dbf1743ead5aae974236e21350dc5443807390ef2498d820d55dd5261cf120c35f0115667884a94f99db4300710c1e39ddb42f813ba32d7d9e7baaf8bf3111128be16884754f776e6ae2fde0ff43689599722690da94de4bd240d6747299c0e322e7faf15762d6a4e057b760bda11fbaf8ac26df3b9b5c570d332aaa2ffe9c1721175f02ccfcbd78e72966a376a05ebd566ad1cdf9ca8efea00224ad941e0112251adf1671c55e9b26ece3388d9eede35a13443e39dfef6eed3f1a90c910bac110d7b41d898ab3f5c0ec26e62f3f4b45abfe5be6d0c7a9a633cef2620c6dea45b518e011fc1d4280dc5a21a6fa25ba37afaf4c944a71bf563a3e42d46366fa4ec3b636a4248c8cecbd1fa0a7ab0f5e5c2916eb76b73e818fbc98375359d636a5804a4b9b855fff88e30a20b8b01df994e12f19e00c9f2d003832ac3cd46ae20251d389409a41211000976685ebe2bebbf00396a9fae4281891c56dd24bee0664cc8e6df1f1695fda29d8d3f47d098214afe19880ce75dcbca9b03d0a0d67a0eb344db9968601e9c4cb8e6379bd1f41071c78d036381efb1f2f63cf876483b016308fdc112053665cc7b1b1a6c77a72a742ea19c8edfebda206cbb6c79937f52966fdc5db0490818a54994705e3030fe562a2cda445056a32928ea25d0f1e23904d9bbc159f44f9902cbdf29ac963bbff262f031a5a7f752897b26884fbbc35093a6265e772e464f997916725e36bb89cf2e9a66af5f70626708be0182ae7793c78735d73ed3d012f0747544a95c9484e33076236f5a3697b2fbae75f937085f53e32f9cd1b6e263a27f498b9349fd0b17d611687b733504fe75992e83217b29aad64424303a87c6b4f74d9bdae9f3186d85d7e9289c9893437fffff0e69dcce115c548110578c57698ecb0ae172ca17e9f63cff53ab37f8740768722abce32cce984fc4586b08d66022c44cfcbcc194a88561fb7a6fe9e399c9d262340885d948e3cdc712ac4a29dfabd2b7369b9f2eed58ddc017760e78ebd7e4476047f1b30fcc1a49aa0037d525cf93218fd6ddc7afa1f68b5df2e429a92506a86b8cb76e11a054674e0b81b9b147beaf622e89f901d7fa19ec662535138b22130359d2dc873a6062ff5a8ecc61397710f57762d243bd35a2d3a96e435fef9a961b87f0ffd6613195f53372345d55061e1844da734a58bc6433fdac460796ac9fc202eed9468b4063a14441f0d6f87003df89173dcb098dbf9828538380387c73293e444b2d023f803f188526c3f58b7af0ddf32ae102ea655b03278fea844298518f92ef35128a469365cc47f1fa6fb72046a8a23d0802ef72aaec81f2c6fff8fbed131e6d8f648102006d8c8126f92a32dc29c0c7627bcabe706804c4d37c838db09a4263c8e2462026025b31d21f80196458737a9cdf8ddb89c23acb62c81969cae840c09d7308809468a0a4b44f632012b72b8cb33ce33729d5b2167cb42842d1812058de25ba52e47eda7eb80b805344582906a404a4b3560db7e55b5f4802d7b067bc0f7e9f972342610f2f19373c5737f352d6a2e74dec960bbf73ed45c9eba57e2970b723928a3d35cf2e08fac68d8cae07d0f1ffb311a6b90984fa02b2572cdeb4f0e0cc83783b53f7f58d15dfbdc3277b93359eda75a04812727b74a1f93d571e10afbc1c3d66da0f340fe5d24e9abab5567af5b9d86ababd9b18f2e89b704378813c432a0a6191893052dad2eef5709435689d1daa93a10c7115f7841faa3b1d2be38c123ac7d1839fde6df657d87448a0b845e1681e86529a443a3d0c91270bca6137e8d460225d9fafb4c63b6f80d63298ed787a88026a8726836ba5ebf01f4a8a5f8f8153b56df933fab3d1f06e79369e4d20616d5aa252ff7bc8550757f520fdaeb4fb2b2377888cef1ee09f5009a28adc928b4cfb8605d784c3e3b54993b73de0f2cfa647536e234f7453d4b746238aa389c7bf50c0f1311c54a95a03d86833f14a41de07e27095ef7a1529608bfaa3c465f1bb8b33928b989dd0ada998bd292ad25caa0d9d188093c98c7c77afca74d3b9b8837e60abc3c1e8c127d14605ba1c4a0bc931a32d9ef87bffd94b5d0630c46b7d9de1c9f5b37c19272a2282d3c5a7a5a2c167a687fc16d5774a8b4df7813e8f49bab255d6283fed99370d96d2e75babbda01070b2416480d5aede3f0ea9d3d2d56652f94d889b91d949cd004ab39aedd5f7092953a1595f8576b3629b1538cff7861888ea8cc1ab5e2464376b7cce6332bcaf3cb1d308e020c871e4c4aec9387725e6863f91e6aa07216ffd8cbb1b710b2bf1bfc578f7977b1f420cd09a750ad881ccc407967610f5743d857bdddd97f8923e08cc719460acd250a7ed1cf74747f9c36341b8a8b72a7ce5700a8a3ae7b852caba5cd9c7ffd5c400703b947717686869817a6e5a7f7f0aa5f866ee076de6fe429c79a69a4f656f2fb237f56d3de0b4d2b6ad20514f98ce9e3c3dc2c44ca6c195e7471b8339dc4ea5c5c862901d45ead3ea120c9e1002ce589bfdb39d7be613c9e655bc0a8e8843ec5411d8a12406685dab89a53a0ff119275f6b41c3de3466ff834c285b8a9759edf278d7d1458186f38a4f5b2578f9c083df5617276397c919a86748731983d27d14ffa15e3681b91f3970fc10057157c43c55fc97ad98a9738635f458221987f792867a2385f90d8678d658e4ad837b3e8c872029f66e8dffb607f25a581163fd6423b90e4f05533480f83849e967f4c771a58bc1e2627b714be020d789568a8687fae71cb634a3e8d081d19dbbb51f67c7ae2c9736cdbfcbc7a4c9d2be542650c9730a77cf2d47cf43dd95fb33a9794797f6293faf1be897535c8caa6679095a88e00238b5f832052872efb953d775e752fee344fcc74387fc7ab5d62a9c8a7e1310c16d55ff547475ba27a4cba66989e20e2e12acfd481b8b4a722129e93c662d802fbd316c2630e546c83182b4b9dcb1c8107d7406f92d8b766620acb3851e8b609496612e5a2effd097361c4081694ffc4b4d1be6a239c18ae57ce5b44f86d2e629df6d13fb92c10ed186217bd69832462158098cf226ea1a2fa87a1436ddc9a1bff0218c7706da32c9ada87c859b58d0f22c30fba48ff66401186aa1e9e99c207ec449185901b0ddd6dadebab6781343165817e22653be49897918daf72c486213376fc88a83c35e2adad83291bbcca750a270615b508bb561f69805fa2124a4fd7087a8df5be91bf543d4e35e7955132ae9e108c2ec51f23adf8f27e7f622f7660abd6520d4f25ac52545253272e501283f545441e0fe1c44671a3ad61bc1e77b6bf361c00eb8bb9bc1b9f87778a3f0546c5402f20d8800c9f20dc16a7f9524683dc36edad34f980476237b0c210c4f0e008c84e83074abeb25be503ce58b18ad7f5384444db376b4f57dfedb9ee214aa0803c4037eeee96a5c2d7b59d9110a2766e980807c76354fa8923aa81633e0c92387faa62f7e12b5e3218ae99a9afa3f38bdea0ade00f2741699c276163f98b81c6cf28bdf37a525f8e466a248fe8d66ac4125789f2a072e26fc940983a3688c1995edb8408bc5b872fc3c2ff5ef85a59fa7c395ec48c3ff4b6e9cdd7bc6a076efe3031a2b4c09e38e9a6f79e6743c3fd12e94f1937e339fe694ae9faf944f8eacc86d20f879bc3d83897b860be5ef88f75c9c1385ce8417780", 0x1000}, {&(0x7f0000001400)="e01eb172a77ec09236b4566023ac342f058a6290a6496082a7067ba2dd983b8bd7e886954f51", 0x26}, {&(0x7f0000001440)="df56e3f02bdf92f31ddac53ffd0f96dea9c40b6dc27ea2ef3b93b5a7c9b9fcf9835a7dedeba65092f11c1eb643a04f8b5a71aed00e7581b9121879b6dd2be0be2dc65fc5c27493376c8773a41d21996001548d233b2f43996e6375b1f5013dc68f66f69dae949490c6968153058955cee093b577", 0x74}], 0x4, &(0x7f0000001500)=[{0xa8, 0x6, 0x7, "9af984b2361d3256368bd960cf49273557350ff81d778d6e1b1e68b4c539c4059ec69fd4886699c3574cff83c14db0912e4c23940d78d298a8447c354f8afdcf7acb8b18bcad801b786fe6542e0f456a49705b61b3752a33691f958a7ecaf3b208abf8e0ab49712ff6baed34737e23f50894af5893c980373901a1327726a1cab474945b189ebb4d49326ba25ebe932132ab364452"}, {0xc0, 0x107, 0x7a58, "1a233ac066f152ebc4caa588b340751c746230909738e25fe66378cf98f9928be6b66fd3ff96f5b0a48a5fd93f75299675848557274c8f3cf3a129e31eb3b072270987f5234559adf53add7531dfbed58b6883b6db6616be933c77446586558c2de941ffeb676cef0a9cfc29808f241d2e34995b3fe86e0b83c3c62a53938a4dbe92c7273161a6fc0962a648ec470862c736eb5f24451d1c2741b4c703f1bc938eb99d61a8026d57d3be422a70b2"}], 0x168}, 0x0, 0x8800}, 0xff) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:25 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) 21:27:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x2000000}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f000060e000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r7, 0x10000000) syz_io_uring_submit(r2, r10, &(0x7f0000000380)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2000, @fd_index=0x8, 0x401, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0xcd5) io_uring_enter(r1, 0x4aad, 0x589e, 0x1, 0x0, 0x0) r11 = openat2(r6, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x301000, 0x60, 0x14}, 0x18) read$smackfs_cipsonum(r11, &(0x7f0000000400), 0x14) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x100, 0x0) io_uring_enter(r12, 0x6a69, 0x8370, 0x3, &(0x7f00000002c0)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) [ 551.362151][ T9698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.400834][ T9698] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.442215][ T4788] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 551.465130][ T9698] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 551.486583][ T9698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.527367][ T9698] usb 2-1: config 0 descriptor?? [ 551.561603][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.577569][ T20] usb 4-1: config 0 has no interfaces? [ 551.587718][ T20] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 551.627035][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.672546][ T20] usb 4-1: config 0 descriptor?? [ 551.788667][ T20] usb 2-1: USB disconnect, device number 104 [ 551.829939][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 551.851834][ T4788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.862722][ T4788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 551.875430][ T4788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.886071][ T4788] usb 3-1: config 0 descriptor?? [ 552.201570][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.212539][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 552.224349][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.236199][ T36] usb 1-1: config 0 descriptor?? [ 552.360260][ T4788] ath6kl: Failed to read usb control message: -71 [ 552.367204][ T4788] ath6kl: Unable to read the bmi data from the device: -71 [ 552.377179][ T4788] ath6kl: Unable to recv target info: -71 [ 552.388465][ T4788] ath6kl: Failed to init ath6kl core: -71 [ 552.401145][ T4788] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 552.416948][ T4788] usb 3-1: USB disconnect, device number 82 [ 552.491886][ T36] ath6kl: Failed to submit usb control message: -71 [ 552.499022][ T36] ath6kl: unable to send the bmi data to the device: -71 [ 552.507809][ T36] ath6kl: Unable to send get target info: -71 [ 552.518982][ T36] ath6kl: Failed to init ath6kl core: -71 [ 552.532288][ T36] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 552.543193][ T36] usb 1-1: USB disconnect, device number 5 21:27:28 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) r2 = syz_io_uring_setup(0x1b52, &(0x7f0000000280)={0x0, 0x9718, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x57f0, &(0x7f00000003c0)={0x0, 0x2dcf, 0x2, 0x0, 0x3c1, 0x0, r6}, &(0x7f00002df000/0x3000)=nil, &(0x7f000006a000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000440)) syz_io_uring_setup(0x4fa0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000060000/0x3000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r2, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:28 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000"], 0x0) 21:27:28 executing program 4: lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000800)=@ng={0x4, 0xa, "abf45a7c05679b3e64355d"}, 0xd, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x2, 0x2007, @fd_index=0x8, 0x80000000, &(0x7f0000000280)="eec1896703d8823c3e0f46da35cd8b82281383ac69ae5d9b83c2bbe08104ae22e73052b38b3980efc1eb8be4e6d7da4a183f0f6880bbe014824a398944b7f501660615416089f99f32efbf0fd67ef633ba24eebad730a31717a00944c4811e28320dec1138e7cd1cda4d9f49463a4ef8569ad41969eb6b6170e9", 0x7a, 0xe, 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1e8}, &(0x7f0000229000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) vmsplice(r6, &(0x7f0000000700)=[{&(0x7f0000000380)="8abf209324b748453afad56d32f0fae1b075ae7d6d7195491d64cd76b796a47ab40b5071179b3f0c04f2c47b046579e32c68ced2e856646a72ea9bfa91c8daf93e4a55828cd57d23e8505cc940ffdf2c24a3bcf9108665d18ffde2e8a55b27229b1e33aa01366325ccf6a350f9985068b2d3e340e6980ed161aca8e57c21701ab8f26dc34101daab004b41ffcf4233087d9a0e0d7699fc19c2b3fded6215bd8efd0cb82d728078e1cf1c17e41f7acdf3bb2bf356d28cc56aed1704db8c2317340098693d32b739223b6e194264c807a2a17606be7ba80bc3646f5feedcc7ced872da4e428f6a8ec150628cc19432", 0xee}, {&(0x7f0000000480)="51b3c9a22d83f6b5ea61256b61557c166cd45c8ebabc56dc9fe1d08ba149651656a6f8edd78692db6bcf45fb627fb474b8ab364bed16298e2a359e6ab6930f3b70132190dcefd2763113c0ca601f2be16ea42a96d7682f510fe4c82625b99d59ca4d01d42f0529401371f7ece7fb1478fe2e318b1966466cb30d48c394b774986414b3390d5e143e23ba68a8762b48826b665dcb028806f9bcb5333ca59c451d15d19a2b3474eb683d4e01949a2d01132a60408f3c1cbeeb4ea44bd96c15a173e32cb409e8347fcb9f8efbae4b6c3191ea0035c8bcdf29d7316033e80a96c5", 0xdf}, {&(0x7f0000000580)="ad804a269e4586f6a38c93c7375945e6006af3524dd6f6026be41ead43956dee7a38eb36e89fe3cabc90e4793b749e0d32d2d15f2d1839e0117b481e6443de484114ac7dc8e19b3695245f9697e2ea4cb3e598be6f26ebf3eb1fba70a1360508f1ff266c0a0125cb5f0e889014f40e103c0f72116bf737b848be2e97a92ceab1e1e26e6e90382a9761728213445c7a5e71b91c743f241581a3e7e6c9ac89277c9ba2206383aa3929", 0xa8}, {&(0x7f0000000640)="0f6c80e8d52b4f79196307039fbfcd225a57b1503e4eb3306dfbf095b647fb179eda9072975d70a9585c3bc5068e0074c751a5cf2370c7f50eacbccd364aa6018eb0c0a68d2deb6c0e00756fef8893feb31f05742be7cdd68e40d68017dd5559244fb776d6e9ae", 0x67}, {&(0x7f00000006c0)="e98785c5e6c09b45d168535c9a660d1501d3e46581a2acab4f4d9a60fab1cd0604b6c8e9375e", 0x26}], 0x5, 0xe) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x4, 0x10, 0x1, 0x2}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) dup(r3) r5 = io_uring_setup(0x4493, &(0x7f0000000280)={0x0, 0x25d7, 0x13, 0x0, 0xa1}) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = open(&(0x7f0000000400)='./file0\x00', 0x400100, 0xb) syz_io_uring_setup(0x7e54, &(0x7f0000000440)={0x0, 0x3b27, 0x0, 0x2, 0x282, 0x0, r6}, &(0x7f000016d000/0x1000)=nil, &(0x7f00004f6000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x7, 0x10002) syz_io_uring_submit(0x0, r2, &(0x7f0000000640)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x6000, @fd=r5, 0x3, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0xffff) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x4001, 0x0) io_uring_enter(r9, 0x4c62, 0x640b, 0x1, &(0x7f00000003c0), 0x8) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 553.748830][ T5] usb 4-1: USB disconnect, device number 47 21:27:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x6437, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000396000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400000, 0x0) io_uring_enter(r7, 0x657d, 0xab9c, 0x0, &(0x7f00000002c0)={[0xffffffff]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:28 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x3d33, &(0x7f0000000280)={0x0, 0xde36, 0x1, 0x2, 0x38f, 0x0, r0}, &(0x7f00002f3000/0x4000)=nil, &(0x7f000023c000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4515, &(0x7f0000001740)={0x0, 0x0, 0x2, 0x0, 0x10239}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:27:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 21:27:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r5, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@generic={0x2, "7bf8f7f96b6fc28ade58976032350baf685a79aeb8463a7dcbfe466cde58f22292d1ad3f15b9f24422758f8a82922618a728f0abfa324861ac03de64c044b72539e54760866c0744e566bbef750745fe3d6f6fb1772d5068b7af5eaa93cd23dd365353fccd187314f69abcefdd005971137fc47e5a31d400994480384ec4"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)="5a6960973b4602a52b465a590291406e6769d048356fe79814b50bc596ae4436daf7f89ef369b1389fd41e555356f95d6f4d", 0x32}, {&(0x7f0000000380)="39ad040135d0e01b8259fb72e0a62759a3da76ffc46b6c6f1d1be5c2dd774ee4a800fa5af407f3914fb7aa47242a70f261d14e600754598dc7b5f1da9648b3dca6e0492d6410942f0e08b9576d2cb8fdc049d4f82cdc0f2309c9f9eb4f5d6bec842a01856ef7d5a020f348ec6f61951b773a1bfcb18272329cd93c05ffe94f80474c2cf64cee1dec63ed7f9085e148a2e2b81289ad78f9fe8931c06a1bf226732c039b749ece15621160d231b1767b314229526558bfa8e41a4d43558374a3e4b84448e8ca3216bd673c60593a9142df3a99d1882fb85af68a1bf258b9a5a11ccfa9349637a9fe61a54b7c", 0xeb}, {&(0x7f0000000480)="cd41130d3f", 0x5}, {&(0x7f00000004c0)="66d60546a5d5a9a968bffd6d1491436d0cd050a75032c79fba45078c9d071485f7688bc36003768da174e3d99452156d6bbf0db0f1e9a0d87303f61ed8cc552852671156c08eacae60217fc73497ba5927db42d7f847d5539af609868867911e2308eacfb44c6e54f3ea6608590d37024fcf844e6ddb001b3001b322c23c16d2dff98e131378d165e1dc71c347194e57ccbc583da3c1d8dbda71836e36dc24fb6643a2627fba221b1a80976a20d67d888675f6812b2bd9de7d04cbc463cea9aa7e7dbc8a0e", 0xc5}], 0x4, &(0x7f0000000600)=[{0xd8, 0x114, 0x401, "8c580e75b9c55948ceca7bf14bbee558e85b8b82f2efe219fd92cce7dd94dcd17b78c4c1e986828b98a99d7da73cd014fdf412ce6e85f171b7d3b6d6a29c29594373ee1cbe5e59ba5cf2929dde204f1426ab649ca0548987c5ebcc8a7d4fc7bd1ec9640ec9e87789fddaac6e70fd007b185bbae80ee3eb8f328dd71bbf01ac4831b7874aa2cad3b76609b510ac7ed4a04646ee9c3fd3a30d87be38723aa662e64195f295ae97c5dd081d79a4726ceb6a104a534f00d802ae7cb7440a642eb1395b38a2425743adbf"}], 0xd8}, 0x0, 0x4000}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) [ 554.130461][T23161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.171709][ T36] usb 2-1: new high-speed USB device number 105 using dummy_hcd 21:27:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 554.296734][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.365367][T23193] bond130: (slave bridge122): Enslaving as an active interface with an up link [ 554.633642][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.650334][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.661601][ T36] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 554.672481][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.683538][ T36] usb 2-1: config 0 descriptor?? [ 554.841542][ T9619] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 554.944272][ T9545] usb 2-1: USB disconnect, device number 105 [ 555.201665][ T9619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.212222][ T9619] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 555.221266][ T9619] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 555.233609][ T9619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.247748][ T9619] usb 4-1: config 0 descriptor?? 21:27:31 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000610000/0x3000)=nil, 0x3000, 0xd, 0x23031, 0xffffffffffffffff, 0x8000000) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e) syz_io_uring_setup(0x7497, &(0x7f0000001740)={0x0, 0xfa4c, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r1, 0x4a30, 0x1000, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x5d4f, &(0x7f0000000280)={0x0, 0xe390, 0x10, 0x2, 0x252}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r8, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x0, @fd=r8, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x0, r9}}, 0x66) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r10, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0xfffffffe, 0x97}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:31 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) [ 557.264525][ T20] usb 4-1: USB disconnect, device number 48 21:27:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e) syz_io_uring_setup(0x7497, &(0x7f0000001740)={0x0, 0xfa4c, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r1, 0x4a30, 0x1000, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)=@sco={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000440)=""/162, 0xa2}], 0x3}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0x2}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1a) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e) syz_io_uring_setup(0x7497, &(0x7f0000001740)={0x0, 0xfa4c, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r1, 0x4a30, 0x1000, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 557.701580][ T36] usb 2-1: new high-speed USB device number 106 using dummy_hcd 21:27:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="ac2272e236f8841d15a7c597c91f57dcbb9310a66707082cd1470d311ef5f9b46483d6bbf75bbb052dec4e133da65176efab0a8ae1b11aa97efbf972f717f65ca5dff3e7ff1eda1e101f164fbc91fe3fd65f5e6069224974e8b94c80f419f9fe091a1e3c8f8a8b63741e8fb43acca23158cb32b554027c77754d6e6c09baf947bca4f0bea0bdc0c9eacbe7c0e170b9609a2a77e915dc5f33410a3b2e6d6ac66362a8cf6ee2611c5a76349f", 0xab, 0x4048110, 0x1}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r8 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x684d, &(0x7f0000000340)={0x0, 0x56bf, 0x8, 0x3, 0x158, 0x0, r7}, &(0x7f00004ff000/0x2000)=nil, &(0x7f0000610000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_setup(0x4345, &(0x7f00000004c0)={0x0, 0x6203, 0x20, 0x2, 0x1a, 0x0, r8}, &(0x7f00004f6000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/cgroup\x00') r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000600)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x9) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00', 0x120, 0x20001, 0x12345, {0x0, r13}}, 0x2) [ 558.142032][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.169024][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.197415][ T36] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 558.229148][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.259816][ T36] usb 2-1: config 0 descriptor?? [ 558.546424][ T36] usb 2-1: USB disconnect, device number 106 [ 559.641571][ T4788] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 560.041818][ T4788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.052940][ T4788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.062746][ T4788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 560.072784][ T4788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.083894][ T4788] usb 4-1: config 0 descriptor?? 21:27:35 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e) syz_io_uring_setup(0x7497, &(0x7f0000001740)={0x0, 0xfa4c, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffc0e, 0x8f, &(0x7f0000000340)=""/143}) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:35 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) 21:27:35 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x787a, &(0x7f0000000700)={0x0, 0x7353, 0x1, 0x3, 0x205e}, &(0x7f0000d7d000/0x3000)=nil, &(0x7f0000d7f000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f00000003c0), 0x0, 0x4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x40, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum, 0x0, @desc2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f0000000500), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000d7f000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000240)=0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x1, &(0x7f0000000580)="45bdf25695f2f36316a09e86282bcc8ef711d5200026654275080ad77cc649ba22c576c877cd36c91e11ce1abd9b7dc511a3e4f413c875f2bc915e198bd6cdd9e647dfb695e2cd25f791895d41a4fd1112acb5461900ca985e931d4b18a8ef7392c63ada894755acf1a4aed9c7fe9442fe43ada61905ea9a698d2537d083288942a5fef1a7408b6095f07f4baa45871b561f8b79d23b38edf5080980c3681804575545f176f6e649921c3cc581d40fda0e511507bc9ca1ef01c421b64f13ffd5dabf5724a9151f11c185640399b0404119ccb90d0976ceb404de33611c4d0a4b8ab9a9e1f3b15a022c", 0x12, 0x0, 0x0, {0x2}}, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x80) syz_io_uring_submit(r4, 0x0, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1200}, 0x0, {0x0, r9}}, 0x7ac38ae8) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x50, r1, 0x8000000) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x80) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0xa, 0x4, 0x0, 0x7, 0x0, 0x0, {0x0, r6}}, 0xe5a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0xf4, 0x1, 0x1f, 0x2f, 0x0, 0xd6e, 0x10, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000280), 0x513a2420a8a7cb63}, 0x200, 0x2, 0x2, 0x6, 0x1000, 0x3f, 0x4}, 0x0, 0x10, r9, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 561.363771][ T4788] usb 4-1: USB disconnect, device number 49 21:27:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:36 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417c, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/4096) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r6, 0x0) r7 = openat$incfs(r6, &(0x7f00000002c0)='.log\x00', 0x11280, 0x393f77d5fb53ac6f) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000001340)={0x0, 0x81, 0x3ff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'bond_slave_1\x00', @broadcast}) 21:27:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000002c0)={'gretap0\x00', {0x2, 0x0, @initdev}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@ipv4={[], [], @private}}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 561.761812][ T8] usb 2-1: new high-speed USB device number 107 using dummy_hcd 21:27:36 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x40, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x224080, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x12}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4041}, 0x810) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x40000000, 0x4, 0x2}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat(r5, &(0x7f0000000500)='./file0\x00', 0x12d480, 0x40) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000000)=0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x14501, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000400)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000495000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x101002, 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "9037b48fcb0519e828fe9a1166fad82663bc97353a12e5596db9d0d2069876904449d466bcca5fb3273d2ebe849fe18fd6759fb25c80a46c1ed07b1f61bc8328708b336340fa12feddbc8a155eb9a67c94f5b790642d31e594254f8b3b8822790b3cd22ab5f9dea3"}, 0x73) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) [ 562.033970][T23355] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 562.099491][T23355] ipt_CLUSTERIP: Please specify destination IP [ 562.122174][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.151983][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.175977][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 562.205399][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.230242][ T8] usb 2-1: config 0 descriptor?? [ 562.494619][ T9619] usb 2-1: USB disconnect, device number 107 [ 562.551795][ T9545] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 562.714593][ T3222] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.721039][ T3222] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.911660][ T9545] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.921896][ T9545] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.930871][ T9545] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 562.940621][ T9545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.955300][ T9545] usb 4-1: config 0 descriptor?? 21:27:39 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:39 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r5, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r7, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:39 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) 21:27:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r7, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 565.288336][ T36] usb 4-1: USB disconnect, device number 50 21:27:39 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 565.465013][T23399] loop5: detected capacity change from 0 to 16383 21:27:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:40 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 565.691531][ T9545] usb 2-1: new high-speed USB device number 108 using dummy_hcd 21:27:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r3, &(0x7f0000000280)=[{&(0x7f0000000700)="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", 0x107}], 0x1, 0x262a7, 0x5) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x20, 0x2}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f00005f1000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd_index=0x3, 0x10001, &(0x7f00000005c0)="0d949aebc24d3590e24f53d4aa6c629b29e2d6b00530f3c1faccfcb99aa102f64b0948f54f89f49b6d9d4eded1a8bee24774123e91fd2206266323aceeef182bb2a97456c397cbb4012ebb2bc88e3eb8274898cdcd11b8fcf2ab13a80a89e1316bdfc2a046c1b4c150405f619964877f9e01c28082715fe9ab3664bb987e6d94d0edc46e66ee0636d5adbb40ca5bc30effa482bbf3f38cd4d154efed6efbb3be33db095bbd96eef4b9f1e141dcae0e9e36a2e8b098f2a731943a1f902fc8b7dbf4047f", 0xc3}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x6, 0x8, &(0x7f0000000680), 0x0, 0x2, 0x0, {0x3}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x82, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x8c, 0x1f, 0x1f, 0x18, 0x1, {0x1}}, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000340)=@alg}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/seq\x00', 0x900) fcntl$setpipe(r7, 0x407, 0x7f) clock_gettime(0x3, &(0x7f0000000540)) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 566.052132][ T9545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.085098][ T9545] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.116425][ T9545] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 566.148061][ T9545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.176591][ T9545] usb 2-1: config 0 descriptor?? [ 566.450310][ T36] usb 2-1: USB disconnect, device number 108 [ 566.591700][ T9545] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 566.961509][ T9545] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.971951][ T9545] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.994812][ T9545] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 567.005252][ T9545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.018275][ T9545] usb 4-1: config 0 descriptor?? 21:27:43 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:43 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r7, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000000340)=0x7, 0x0, 0x4) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x2100}, {0xffffffffffffffff, 0x208}], 0x2, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000280)) 21:27:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{}, 0x0, 0xc, @inherit={0x60, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"]}, @name="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"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYBLOB="bd70000400000000000000080002149ae1b57c95a5296b0000dd01000100"/48, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f8378af0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f730d800a841d1cb0c79e8435815ff0f"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002a40)=ANY=[@ANYBLOB="ba01000015e902e73ab82083271a850455e66e48f8ab6340fbf34259671d74010000000000000021964771a5daf364daf34a7bc1bdf18c4ba9d5f8199775863f84c471d71975672ce83820e109d40ac49511d4cb9a1fdb1d41f552acacdf08752840baf9b3248f853c3a0866b8c8db05c01d17468f1c570200000000010000001c4f47acc100a4918dfce089dd08d527ffcb2f6588d51a8e89ad3e61a114bd7bd354865812ad283fc8eee46cb7fd999c5bed57fa62b96cf1e1ffd3fd462a0354b2269bffb6fd8ffa67563905911ac7934dcf1863f7c6cdb3674521bb7b878c88a057ed339f9310f7db66cd1e19dce0a1b4d455511b70647dd7e8142f71bdfc69552f0883880ff0dccd51b95504d22279135b3d9486fefee05f71250da37f4f3f14f504e1c46cb6a2cbf6fc70aca58b97e76ed44000000000f3dfbfee8023f99be68e76782d479b9f7d26ddef0e6adae305b9aac8055180ccf555d429e58a7aba6df0291b88237fe41e711942095e8c02e26a22675bcc54300094a1af5c7d574b4f04db9f71eddad711c00c24e90f8f90866300f81ca06d66f4b17915fef24a7a6b8e7c1e80d3b8dffff2c96c77a578875c793445ffb3ec7ca8696d288552e6df1039c48e4ceb77f51b14127fcc001cc3248744d462b43d48cba20ccc3d40be923594a7b65b737fb9983a45164b8f701996c7d1d0886f604d179149c2deb908000000e3006173372860f0c57226fba67d795b32fc319e249decc96657262da45daf55a12498f89cfc28bf467bad22a66ecfaf09840aa258d959a42ee6a36ca09b6f0ef02956062cd8c26ca528b6ad3c47b0115544563560be31189351c2dbb153b503b95d9a1c14d6b47c56c8f73ecb7a2fb30987e875ee8d3db8313c2d5d44c52572d1d26bef337d124317d05f5ab8b73d8719e90bb9a4f37f52f4d6f329da7df5f4c9b3b56b40e7d91a84b639d42437fcd2f200dc2df0fdfe4c8354dce9d1d5565d70468ec03590129fd8e085124af8d0d77231b001d69c3ee47dc7473d35feb63a550254554ed34f8a9d1193cdd29151dbb497073d32dce253d3471845686f554727eaaa49c3c08e565beb8121056a6425bd11ec981056296f86f0b362cfaff3f6d1380d3b8781f4055dd2d2296ca388968eb1e1857ca2f9d21503e2afbe135ff6f1007335e654aab737fa30b53d5c1dfde1ff807812ae87330c2ddc7d87e693c0fee2f45d61b8ce1f79b1033ef81a5515a0edef3c4b46c0476714c6bafc2d2165022889715c84c87fe1244e944675c2edc8dfb56e11cea2d1b0927bea4323", @ANYRES16=r9, @ANYRESDEC=r7], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000580)={{}, 0x0, 0x12, @unused=[0x9, 0x0, 0x7f, 0x20], @devid=r7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000020c0)={r7, 0x9, 0x3ff, 0x1}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000340)={r7, 0x1, 0x8, 0x1}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r7, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 569.273494][ T4788] usb 4-1: USB disconnect, device number 51 21:27:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r5, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r7, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:43 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r7, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r8, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r7, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=@ax25={{0x3, @null}, [@null, @null, @remote, @bcast, @rose, @default, @netrom, @default]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/100, 0x64}], 0x2, &(0x7f0000000600)=""/216, 0xd8}, 0x0, 0x40000003, 0x0, {0x2}}, 0x1000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0)=0x0, 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r5, &(0x7f0000000280)=0x80, &(0x7f0000000340)=@qipcrtr, 0x0, 0x80000}, 0x1) [ 569.681332][T23497] loop4: detected capacity change from 0 to 16383 [ 570.031770][ T4788] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 570.391887][ T4788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.402221][ T4788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.412196][ T4788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 570.421939][ T4788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.432072][ T4788] usb 4-1: config 0 descriptor?? 21:27:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r5, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r7, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:47 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r7, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 572.749813][ T9698] usb 4-1: USB disconnect, device number 52 21:27:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 572.874495][T23543] loop4: detected capacity change from 0 to 16383 21:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r5, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r7, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 573.345584][T23580] loop4: detected capacity change from 0 to 16383 [ 573.362334][ T5] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 573.757415][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.769786][ T5] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.779933][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 573.796883][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.808692][ T5] usb 4-1: config 0 descriptor?? 21:27:50 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:50 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:50 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r6, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r3) 21:27:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.pending_reads\x00', 0x80302, 0xc0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'bridge0\x00'}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x28) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0xf110, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x80) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r2, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x3, 0x6, 0x0, 0x1, 0x1f, 0x1, {0x2, r7}}, 0xfffffffe) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:50 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 575.945603][ T9698] usb 4-1: USB disconnect, device number 53 [ 576.079187][T23618] loop4: detected capacity change from 0 to 16383 21:27:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:50 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:50 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r6, 0x0) 21:27:50 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 576.426620][T23643] loop4: detected capacity change from 0 to 16383 21:27:50 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 576.751637][ T9698] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 577.181730][ T9698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.201500][ T9698] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 577.210611][ T9698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.243686][ T9698] usb 4-1: config 0 descriptor?? [ 577.681743][ T9698] ath6kl: Failed to submit usb control message: -71 [ 577.688421][ T9698] ath6kl: unable to send the bmi data to the device: -71 [ 577.712579][ T9698] ath6kl: Unable to send get target info: -71 [ 577.725114][ T9698] ath6kl: Failed to init ath6kl core: -71 [ 577.745482][ T9698] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 577.756104][ T9698] usb 4-1: USB disconnect, device number 54 21:27:52 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:52 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:52 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000014002101000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="08000200ac1414aa1400060010000000090002fb0c000000000000000000"], 0x34}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000340), &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x3, [], 0x0, 0x19, r5, 0x8, &(0x7f00000003c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x4, 0x6, 0x9}, 0x10, r6}, 0x78) syz_io_uring_setup(0x6db8, &(0x7f0000000140)={0x0, 0x20000000, 0x8, 0x0, 0x39}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x7) syz_io_uring_submit(0x0, r7, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd_index=0x9, 0x7, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x80) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x2, 0x0, {0x2, r8}}, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r9, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4004, @fd_index=0xa, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, {0x2}}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:52 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 578.328104][T23686] loop4: detected capacity change from 0 to 16383 21:27:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x501440, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x10000, 0x0) r2 = syz_io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000580)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r2, 0x4ab0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffc, 0x53, 0x8, @buffer={0x0, 0x83, &(0x7f0000000340)=""/131}, &(0x7f0000000280)="01f2b17482e1c02f6275517b173fbef3954c03896b0c6570c938781a761201d3f6e99a84a89ece7f9e62b1dc2d30e8334f4de58cdcbeeb66401f6ba5c5e71c0577c1995d4bb33771e665bc743f67c78dada275", &(0x7f0000000400)=""/117, 0x21, 0x20, 0x0, &(0x7f0000000480)}) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:53 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="da094e7e3fecaeb7add385934e46e967777fe8fa6093f7550b6b28a95d67c779072baa1cec18adf2423f304135d3f5df3f4262f5c98f5bbf8806513f6e429e37ac24f6cc6216a04dd66a33c50b6a68609439139fc35108830eaae4d503a4f23daafd98305540371e2cf6d048c389ade9b95bc1456442e229689eee4775d17e5d8d23d07203689de28ac986ba486a8d603fa378d66ed4dad2b3476820b63c769a7cba2a196796c14d18f07092c7405b24978fd1dbd2200f42b8d4894bb669d50a961cc704cd6c36d9d0e86c48b1a4a12bf8", 0xd1, 0x400}, {&(0x7f0000000440)="aeb647c61a2915780879736b8bc56adc79f4a5b00a13324d10a67b70a65d527d7ff8015008a59ac6c0544d149509ccd0ab6759154cc2ad869817dc55cbb623cea729000003888d0c3b132f7f15c318aa127fb7f0edbb600d260de2418bf048411e60cd7719b8a00315f3d94b968898225790b100d9ae7a0a2dc60a269c7ace9ec4557453eb2eeffe10bab511eff1ae4cdd058793680bdc59651086d420d7901098a1f737f08f7f32f3a893ff9e", 0xad, 0xffffffffffffffff}], 0x3802, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, 'y,}@,'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x628}}]}) 21:27:53 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 578.653026][ T5] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 578.744669][T23720] loop4: detected capacity change from 0 to 16383 [ 579.061648][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.073128][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 579.082557][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.095331][ T5] usb 4-1: config 0 descriptor?? [ 579.381549][ T5] ath6kl: Failed to submit usb control message: -71 [ 579.388352][ T5] ath6kl: unable to send the bmi data to the device: -71 [ 579.400913][ T5] ath6kl: Unable to send get target info: -71 [ 579.407877][ T5] ath6kl: Failed to init ath6kl core: -71 [ 579.423543][ T5] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 579.439604][ T5] usb 4-1: USB disconnect, device number 55 21:27:54 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x3743f73273d0530e, 0x8f, {0x8f, 0xc, "3f3013089863d508c23e527ad4208df3ae12b4e8c7c49edf0c95596953d59ab5cb4f74f0593cb09c5ef6ba0c906aef79412d825f1a9853ed96f7deddb8c38de01b38cf8fc1f3628f7b29d1d1eda1f0653bb6a9e48426306cde111d6017ab7f8dfc4e387c22b9c39adf6ce510d54a07703bcc66edf0032837a6599a8d9a8b6320860d3707dfc6f552e446ba609c"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "3bc969cb895fb6e755946051b2021af7e00e9a37a7ce74c978b4ab2cbf200614c51f9a5604009b73f7f9efde1796eff2863f67fd46d4e2632c5cf34565005d99880e58cd3561dda4cb1884b847830756b972d495b147c279e879b2bbdba63315c19563247afd6c3b3f63874f1a3f31"}}, &(0x7f00000000c0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7689dbc4d138d685f69b8d2bcf9beb3f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffffff, 0xf, 0x4, [0xff0f]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x2, 0x6, "372380ca", "dae1ea00"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x7, 0x6, 0x3f, 0x4, 0xe3bd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:54 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000d7e000/0x2000)=nil, 0x2000, 0x9, 0xf24e53ca4ce77c71, r5, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x118, &(0x7f0000000280)=0x1, 0x0, 0x4) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r12 = syz_mount_image$romfs(&(0x7f0000000300)='romfs\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff8f, 0x5, &(0x7f0000001580)=[{&(0x7f0000000380)="fd67f39fe09148e45a31b654686df4b87e5c14a4f18827357002033d6fef071f07c27bd6c64e5e3eb239cd500487de4ea5ec8bb06b41119541eb2ea68783218a6220b6cf47bf5c5e0db0a5abafedf39417376c527e9900ea708f3830150efd42e0f0a1be44dc38e4aecf57100fc35988ad994472b80081eed8e856531f3e6faf", 0x80, 0x6}, {&(0x7f0000000400)="fc2bdba7a8bfa08f0b536ca5771363a4ba545e9728498fa3e024", 0x1a, 0x100000000}, {&(0x7f0000000440)="c09a03a53c6a682b58b8cb8a392e9b40f872031293e3f51af3ddc88cb81ca8d331021c4e93ad84c2561d3983f7bb99ad6d5c01f58ab16a1ca6541a64013c13", 0x3f, 0x100000000}, {&(0x7f0000000480)="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", 0x1000, 0x400}, {&(0x7f0000001480)="adf7d5d903f52214bf66dfc4d5dde55d78436a1257fe085cc8a0223588504b9f43d1503be11afe1cddbd43e2f2c7b1c0fa6713e5f4b5a8968491a4cf982603f41c03748b83be7dff93c3251be72bebaa5c9f130032becf483edcd7d90d97f14b958a5daf1fc92188a9a721112f7d418c7cb2b7a4e95dca83f44c43efb0e8085b07c2f2e93b6a59ab18942f0bc9d4176eea55f174ca1771ff925d193ef3d183dd850dbdf90c8f013777ae5a27c022f1f3d3129a451ec206a9459e1df891cc59f66278382ac707d6a5ac086d512f5e2955f1cc0e6d70", 0xd5, 0x1}], 0x4, &(0x7f0000001600)={[{'@)))*/!'}, {'#.,-*'}, {}], [{@dont_hash='dont_hash'}, {@fowner_eq={'fowner'}}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}, {@fsname={'fsname', 0x3d, '/dev/net/tun\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) syz_io_uring_submit(r8, r11, &(0x7f0000001800)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd=r12, 0x8, &(0x7f0000001680)=""/136, 0x88, 0xc, 0x1}, 0x41) 21:27:54 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:54 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 580.024717][T23757] loop5: detected capacity change from 0 to 264192 21:27:54 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 580.096100][T23757] romfs: Unknown parameter '@)))*/!' 21:27:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:54 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000100)=""/53, 0x35, 0x1}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 580.361618][ T36] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 580.761606][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.771997][ T36] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 580.784565][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.800766][ T36] usb 4-1: config 0 descriptor?? [ 581.086170][ T36] ath6kl: Failed to submit usb control message: -71 [ 581.093061][ T36] ath6kl: unable to send the bmi data to the device: -71 [ 581.104687][ T36] ath6kl: Unable to send get target info: -71 [ 581.124044][ T36] ath6kl: Failed to init ath6kl core: -71 [ 581.142513][ T36] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 581.162718][ T36] usb 4-1: USB disconnect, device number 56 21:27:56 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x46, "b40dc2b73d0534d60845272db66aa943b3eaa2fc22644ed1fe4b200da279ddf244a1a187a364028c98234c66f7f143dfea7a07ff9935bead10973181fffe75d7614ff24dde18"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf000]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x47}, &(0x7f0000000480)={0x40, 0xb, 0x2, "9443"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="803c663cc3d7"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "3c86"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 21:27:56 executing program 2: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:27:56 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r2, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:56 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:56 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x41e5c3, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0xbc3f, 0x0, 0x0, 0x3b7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x0, 0x1, 0x0, 0x1cd, 0x0, r5}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:56 executing program 2: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:27:56 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r2, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:56 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:56 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$nbd(r2, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:56 executing program 2: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:27:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'xfrm0\x00'}) ftruncate(r0, 0x3ff) r2 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000040)) ioctl$GIO_UNIMAP(r4, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) write(r4, &(0x7f0000000340)="8aa00e3dae789e592f75630746c254ce1d0d04bdfc32232479b79a32c90b44ee1445091201c7d2119fd699e868ace6307268967d1d49e05e58f5538070d688f6bf1006228b8636393f78a6066fda639208c8c51c96455142933d70c8b80367d8ac94dfc893b333c2dd12432ecb5201dede47b70a78cc31b4444fcb38b2483593cd94892a9da5ae8ffcb718f68155d2936c1f1af5c6e140139f35", 0x9a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0xe32c, 0x0, 0x2}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000100)=""/37, 0x25}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r2, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 582.491451][ T36] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 582.861720][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.872399][ T36] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 582.884132][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.898250][ T36] usb 4-1: config 0 descriptor?? [ 583.391635][ T36] ath6kl: Failed to read usb control message: -71 [ 583.398489][ T36] ath6kl: Unable to read the bmi data from the device: -71 [ 583.415672][ T36] ath6kl: Unable to recv target info: -71 [ 583.424284][ T36] ath6kl: Failed to init ath6kl core: -71 [ 583.438133][ T36] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 583.449763][ T36] usb 4-1: USB disconnect, device number 57 21:27:58 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:27:58 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:58 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) signalfd4(r0, &(0x7f0000000280)={[0x8]}, 0x8, 0x80000) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:58 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:27:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x121000, 0x0) syz_io_uring_setup(0x2701, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000d7e000/0x4000)=nil, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000000040), &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:58 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:27:58 executing program 0: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 584.811509][ T5] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 585.193482][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.208894][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 585.219746][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.235007][ T5] usb 4-1: config 0 descriptor?? [ 585.702234][ T5] ath6kl: Failed to read usb control message: -110 [ 585.708808][ T5] ath6kl: Unable to read the bmi data from the device: -110 [ 585.716760][ T5] ath6kl: Unable to recv target info: -110 [ 585.723456][ T5] ath6kl: Failed to init ath6kl core: -110 [ 585.734033][ T5] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 585.744232][ T5] usb 4-1: USB disconnect, device number 58 21:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x825, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d79000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x7, 0x101000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_0\x00'}) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:00 executing program 0: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{}, 0x0, 0xc, @inherit={0x60, &(0x7f00000024c0)=ANY=[@ANYBLOB="496b09db73ba867103000000000000003a83c835000000000300000000000000200000000000000008000000000000007f0000000000000001000000010000000300000e000000000500000000000000050000000000000700000000000000895b0ad5d5a01c1f1df6d7c29104ab81f5ac61847ba18f7e6144b21482e4a5867ca15687f55678fa26f3b49a4b809261ef8864d046f5c335c0b3f3b2d9f236074e038595f2984ef66c6ba88826394d701dd12eae532c3b335aa0fab0aaa41396820201167996c66309b6cacbc63ae59cd3e6907047591190a6d94cb2370500d2813978cae54ac9d2802ac88940232070e78416f0bb859efd6e08258c967c4f5e25cf59cadbea5a5468d2eee114fc09b87b3ae4909dd914cbab983f7187de4a1b0affffffffffffff5b7f882e13598b600000000000f8f8d77c4a991323264abc81311611b5b65126159c8cc79a62bcf9002e8a8b296803879d4f4988c0b82edac96a0d48032fb763162578c255b7d62363dabe4d9d10b9b44381536f614c53391709e78b0d2775b3f14332dbac"]}, @name="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"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYBLOB="bd70000400000000000000080002149ae1b57c95a5296b0000dd01000100"/48, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f8378af0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f730d800a841d1cb0c79e8435815ff0f"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYRESDEC=r7], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000580)={{}, 0x0, 0x12, @unused=[0x9, 0x0, 0x7f, 0x20], @devid=r7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000020c0)={r7, 0x9, 0x3ff, 0x1}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000340)={r7, 0x1, 0x8, 0x1}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 0: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:00 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b53, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f0000d7f000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:00 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:01 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) r8 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x2, 0x2) syz_io_uring_submit(r6, r3, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r4}, 0x1ff, 0x1, 0x1, {0x0, 0x0, r8}}, 0x6c) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x1d18, &(0x7f0000000280)={0x0, 0x7690, 0x8, 0x0, 0x3c8, 0x0, r1}, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000d7c000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r3, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd_index=0x6, 0x4, &(0x7f00000003c0)="26f51c6cffd43f12af37a10abe295d8c3c686e7064854e7a63094da93ee00a73797f88f8e050d80c2e80c8c245936fd490e9ccd6b66e9e2978ddeb95d1cdb85776a11a6e0af4fa25acea839c19e49b067f849dc0", 0x54, 0x1, 0x2, {0x0, r10}}, 0xfffffffc) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:01 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 587.086901][T24007] device lo entered promiscuous mode [ 587.270893][T24010] Y­4`Ò˜: renamed from lo 21:28:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:01 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000380)=0x28) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@ipv4_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x20009}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000009e40)={'ip6tnl0\x00', &(0x7f0000009dc0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xb2, 0x1, 0x9, @private2, @mcast1, 0x0, 0x7800, 0x8, 0x6}}) sendmsg$nl_route(r6, &(0x7f0000009f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e80)=@newnexthop={0x20, 0x68, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}, 0x1, 0x0, 0x0, 0x40002}, 0x60020004) 21:28:01 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:01 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 587.479996][T24024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:28:02 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, &(0x7f0000000280)={0x400a00, 0x40, 0x2}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x386b1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:02 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b53, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000d7d000/0x2000)=nil, &(0x7f0000d7d000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f00000002c0)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) finit_module(r7, &(0x7f0000000280)='/dev/net/tun\x00', 0x2) io_uring_enter(r6, 0x2a8a, 0x7bbd, 0x0, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8) 21:28:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={@private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x0, 0xfffb, 0x6, 0x500, 0xfffffffffffffff7, 0x40010000}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003580)=[{{&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="03527cc91c5985b37e22f27648b8c03429058a84d172b4ded6ba5f8a9519dc244c20df3379030fb1a0f36bf39cee526e13b456a7ff38827d3cd8f726240701bd004e6a0a44a9426680cab64abe37037fd7ab93c791981e8ed5145ebf61dc436475d509ec41a4c0010e1346d9d63c9281f30ab34ceba754ee8cdc460a2d117a228ca0c5344d9cc7075644af47156b0bbbfa026e7a8d68adc5e30a38df929785828d7a1a0c", 0xa4}, {&(0x7f0000000480)="1b0704673ca9e73757189263472bc447bba1166131c81b1b4c90da588240fa7cd53e6a2231b07d30784c4c33a4b96dea3340220b4ec59bfb28fdaa19472006d9f927827193639e28fad7de5ea99e773106974095b458330d245fb8d6cba35c3549b161fe4e87f4c0ed4fb2ff3033cbd04882e9b37c0b237aa31edc21db452054114dedcf42ad2d0dc3b42b02d5eaf41d0a84276213837bea06a36b674d97750bc377c173d697cd", 0xa7}, {&(0x7f0000000540)}, {&(0x7f0000000580)="e639df217afa03e94c3a591e2d073cf75ce7bdd81b2942ad13f1bd530a16c7dddce99a3154da9dce643566bfec4bea9e5a715a27e2447c54e6701ffffa4baf4d186d731c", 0x44}, {&(0x7f0000000600)="49a6572efc662eadc6729752f75a1a7ee842831e8d1f0129dab0f8ac367322264cb26b4eedcf9b7c39563e5e67c342eb8555f84add62fdf6a9d9a26fa4d73ffcb985544f3b08de7f341cdceb6cb29413810eef0f8fb6de144584c28b39101c468d54b6c81651fae57609fb201ec1c7d88073453e4f849c072cc2980aeaa036b157df7e19d7c2cc3129b30ced009d536c3efee3d37c1f2d0096a6bf610f37b996226bc08423169288b26931cf49a8bc1e39f00d54403a2c0cdbb024", 0xbb}, {&(0x7f00000006c0)="5eeb185b3372a8c09873419d6bec5d436c714ba20d6e8323b78c0d6910c594927ab3d7c7ef150974ea4940e0eb9b3a24c0cd39bdb6a3797343f3ead6dcee96ffd96ba05ce82d1f4d6556f3f75bd3f4e77de67980aad706a8f9f63e5e9125280bb9dadfc485e7946328ed6a7e71f9bb49bafbfd8944ed42f882e767e0ab2ceb43094d1896d01ad77e28324345a0aac5e88786112590104a3e77580d9cc9a1cf77eb74a61893729c0ad0ebfe4d2bde923e7859ef748c0de0a8b441103a50b6c13422f8a19b8f92ce2adc1f48263e6d4955c36861d410f76524f571eb979d", 0xdd}], 0x6, &(0x7f0000000840)=[{0xb0, 0x10b, 0x20, "80b98991a84cf9c093bb5c02743c27299b38668a3d71766cfe32b4f910f8af37e56dad83dbac730c1b21c15ac0c9a70c6eb36f47f7e87d6f1db08d5f4593d22ebe22128162bc6005d4b2c93576bf3435fdf61f6187d350b4a7bd46e4db908a5fe1a0665873af026e015649c972a93c2cd67c4defea6633b4d9c8040de4f152261c6941514e67edd081d9f2aa2a05ca5419a24e95e7886032ef04d98d"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)="0f2fc05e3388b6cf15232d764ab1b9bd7062a3d02d69538d7779ec3ecba5efc0fce9f5d3b6293721919d33aa9cf6fa6151b564c40c5bc37add7c25ed984f99b8790420a84e99e66df5cc2085f9ea95e24588517dedb6244cff43a42a8dc78209f2c33629b020e989c2af3b7ef9e428b9c9a6d836a0b088aa0c56e7eb452249b9fa2d62bee4bcaa4eb651003cba4842d00ee335338cf125f3e48d8ce97cb3f96f50c3b335e7614299d0bb60dc3a918fcd5acb1784272089f8c95bbd29296504479edc80c0c45d09e8f773f1b641af5b047dc4", 0xd2}, {&(0x7f0000000a00)="36e0a917e13db447a81934", 0xb}, {&(0x7f0000000a40)="360940225cecbc9af25a63ebb0fcbb04262edde68b4ddcf46be5b5ef54c70e62204517d569781c80ccf81fc7d2d2e89a61ba1cb6d51d7a79206da584ada4ed481d50d8405935716f2a9d5ccb17cbb5c4d4983b10cb84ba8a9e290df0b5ab0bb0", 0x60}, {&(0x7f0000000ac0)="48067260638dcd437b84fb8351383f1eb3bdeb1dff64cb99945bcbcc0f62a27ec76f8a779cb2c657695181dd37dd4243928593929a39cb24c2bbf841ffc8ab2dbe6953c098f82596d80bed1c26035974", 0x50}, {&(0x7f0000000b40)="92704863f9b58b25d24b97079ce88b18dafe778119f42892f966e40fe16c13c008308178ba4a195f02181145bbdce5fb3d98e552c49e6bd1dc4df72dc28fbee1086ba0ee271d08885970b7972758a104d7aae4c0b65c897bb7a2dea526f1b0bc31506c201985fe325f78652b0390b0c0c49c28a0e3ac0fb5", 0x78}], 0x5, &(0x7f0000000c40)=[{0xf0, 0x10d, 0x6, "bf2d2a45989dcfbc73ff9e9024b64d4421d29d8f547bd12aa145671a62c250b9c60c691a1cb2a51a140375afbf54f242b03e4b929411943d5522935582a56609168ab4bce185c1f5eec9e118944915845705be6e9c3cccf60b3ee877b66757b517653b76b1ed0679642422c73d3730c58614705c060b236ea79ce578ad3147bf4e520f0ec5749c3fe1444599176933f8dcfa14774f394e2ce8e8cfbd048c3f0423e6ebc9231605f86a2fc3fb872965a17314bf3738b8c1ce66e83ce228dd079c7d9998339a32b4d7104610e24525e830f72becbe8cfca8bd1b3d"}, {0xa0, 0xff, 0x800, "3fe8c0c16b1c0d8afeb0e7dfca4ae4a086b5fc590b7eedc58ea52a4aeb360fa611dfd5cc8f3e0befba88de3df26ed0a4d4af658be1db446b5e6779e28cfdc65dbcf4878d02020cbd253c6ac3c86e404b8f8ca662e0691aa50ae196774daeb2d9286aa6ce3f14217ac42ddbe8734f1d9ca178ca0c435b3902ef9a32fcf3068ced150d5040b058a153c423"}, {0x90, 0x102, 0x4761, "312021bf535c6c7419fc49057b74c3434ad56046049250fdcc6244fee303c754a7c623d9f2b7169b73606c6fcbe3a856a4c422a6665a987efec15e34524e275c6c55bf00e3e68037b9a8d4db4e73e0a76bb6be37f4a6035189d8802aa81e9ebb1dfe38559499914933172d0843408ce2b7a6b313fc6bacfb80ca9c"}, {0x40, 0x10b, 0x2, "5b629bf796a4643f892c10fb27392d3c69a09db7d4fbdff916d8906697622568cb2c506a628cc00521"}, {0x80, 0x29, 0x7253, "2dd6ab3a9c2241d36b4e203c66267c91bb89b7f04cc62f6188c6fc87f322ed204e55845b062e0cecec591577699c68118747116ccf8c47825e17b652b85a121af20d8a2f37fd37b2f1643d1aba999e0259a8f55fc6c4b4325390b28e086e7fee6b848b4ef806b7e508f9801adfe5"}], 0x2e0}}, {{&(0x7f0000000f40)=@pppoe={0x18, 0x0, {0x2, @empty, 'batadv_slave_0\x00'}}, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)=[{0xd0, 0x118, 0x3, "bca1c6fe956418d43cccc95ccb23528d1c1d325606220dc232b67a7b32d43387479623f0ea5da1fb98d0944d71a4c0827918f01cba47476473cd80caca18f4d6dbbf7c51c60327b85d887e1b9b1df7c24bd7d9bf816bdc07c6a92fc16be1137ae7ad991a20c8290e037d24245fce25e66a7ffb24b358c047673e2485b81b544570115fcddc6ddebd8b04e706e15a214a7948e513421f61b301dc83d6d672679cc817322edcdbd733c24d74ffb0c19cbfa05945e1d470eec0f3f9cd52a53f52"}, {0x1010, 0x1d2, 0x7fff, "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"}], 0x10e0}}, {{&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x3c, @ipv4={[], [], @multicast1}, 0x0, 0x1}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001080)="52869356ebef2c52918827f54c00af61334a6bf16c88ae2c32968ff3512e9e091a8baa333818fa7a4920704c6117999503e52d86eede268fe61dbe3ce25cd151fd92d8140b6da9473d86f3ba793e597a9b1eb51ddca34c9474e14aa3d80f2b51e5ac57e180c37849cf97bd4c6ce5d75565bc5f9963c7f950f2f58825850f3b1f58f120ba1cff116991cc6dfd534e78ee091a5fde649abb7adb381a4a9cae92b715f026ce2ceccb5efdb60f7fa08d2d23fe3e7bfdead593837da62ff83815d3a57b2fdca026be3e48321abb07b27dc396700b9221d0f7f8fea6cefdfb66cb716d748b5de80e76", 0xe6}, {&(0x7f0000001180)="ee42b002a8249837984ce0386cc6ec5d296f0ae712ceda85a025f04e201ef2317d9ee103e6e63a59930c8bf05438726f7e426c28cf0837941f0df0f1e2343d94ee4d300e79a3f4faab856df060db30fd1fef7eee9464acd69cc306645d86e44103cd75d67e8bcbaf86571796c34efde0f031a97c2f99ad829612a115589064d916c0b2d0bb0b6e908fdc24cf3638cd596b208937c3f5291c29be5c751db4bc0d2b95a335782e9d804d61a0203b9bf5dcc53e14f9f5", 0xb5}, {&(0x7f0000001240)="336dd35af7886d8bbac9a58f8501dd3688e2f36fa932ce9ae632f1849486a928ba7454a3904ae8c4b2046f848e5e869225b5dfc3a627d06c4db2473e278f4e8788a1c7e298ae5b63ea12a7310da849746c54edb6915d68fc15b481be853d692d33a844b4d89d59ebf08d6b57221ce0133bafe25434", 0x75}], 0x3, &(0x7f0000002900)=[{0x88, 0x109, 0xffffffff, "0d073a02c8110608200d2082a0b54b73b2b461a22264437c77a47337aec124abd9a2876bb60638f4e52dd7cd232d27e9f81e5be77842e36c9e0965dd5142dd4206c216e08607e57ea92b90ccf7ed887f29c485c2fa680a11e06ec525f93bc2143ccab082eec9b782a1d158f90e49afac3a9cac9ad9cb"}, {0xe0, 0x111, 0x36, "82d97cd07fb8535370226f2b504a76a68bfc4fd55ea2b5bad7e78a8e6a62b7e8f2026657339fd75ce9eb658753d71b9ce13ddd4dd7897ec0adb778b3e0d2dfd40fb89cda4a0696b6159869e76606629d1389947e34af56c3c5be399a3a80da81ef5a1f0b95540eeca83ca8a830931a475b1b001be9c5802ac7980ff0dcd5a1927c9ef3c185c4a3552b167e6a8ce56e0505e1d1c50d6cd3927b950efe9d59eaa0ad1791651445249b3caad0faa15c189f8ee59425101f06b4075d6d481e750a16108c651723e7538544be"}, {0x88, 0x119, 0xfffffffa, "0e4db26225eb05dd7a625e0119b14899188b8463bfd17fa9b27418faaea1dd48a516067e2e95d24f140ac181ee9da7413ef68ad279b2876ff8315cc762c9ad79fce8ec00f2b982cc66a3070a64130f882f5dc028687666b23a98f0b64c6e87e16b62cd85051424e4c9f5cf58ee6872f00d02ad5d"}, {0x90, 0x101, 0x4, "dbef44fb1d088accd7bbc0feea0b9e445e23c33558a0fc471b8eaa290c4f894151fd19e89595d1f61cfdd423642f20cd048a6d54dfb05abec5cf9f7bc862e9eca508c4eb33a3b39e20326e7e1c6168cce46d3e7a7cdcf00162eb53eb4708aa2d45e6d3cb620569de793f5634b5f97ad52191674223941b991c2a72aa76"}, {0xe8, 0x111, 0x81, "d241fd9865d1941c6d3403da3678902ec301247ef4c410bdfebc1181f52a8255fc83b1b4dad22dd3eed3a15cbcbc483365a8fa318114df485b6823bb90ca76bb473c4e6aaf2b222878b8f8e04201f62a28ca05cd1d21699d23e622a3387aef044972a4162509833dbac6944fc4d11f66a26a32b9d0eaf014ccd98c85674761cb905347bbfd9442976b4077b61d2232678ae65a74a200d87d0c3f2a8ab17e45921c0fb6e175f1d575d180fb584af3187004a20d6da58e092e0196280e9e97af748b80ffc436ab9e7b01cc0d9a0526940c91a5f6e6"}, {0xe8, 0x10a, 0x20, "daa128b5c299f5bf749ead120f0c599d90d1f995bfe711910abba30b76f2cc042614e2d78f3be20aa70f7786b56c43e0dab413c3a5d2a5279702430177906230dcdb9289933ae8acf9a98c0c23524222e3e117d7c4fad8e1da4c40e97a32c65f43f20e11546867648c19d981885d61b5f0cd9b16debd78d58a9da4fdbebd63552c427b4d6736aced01e3b7a14debef07fff714825ecb2089bbe95c679ed9dbe0e79008d9fa0fe07be7458c14f56078be93f31df435f97c2f975efafa8383c53972eefa6afcd15e99a675b5913cec163549697d3dc3"}], 0x450}}, {{&(0x7f0000001300)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001380)="b390b78b2f9b02629fa52a3f77fedbb37ba7bc838c98e556c6257e172fea550ac4c91ca23c813119e50dd22564e27ab3dc828b554595ca0fe330becdb09ffd202d3bf042657968db156e94670f0088df542715ae5aae97b924ea5f4243", 0x5d}, {&(0x7f0000001400)="e44c21038804a5edcb7ba9398608d77066054bb16388064b7987f81b5db639682c3cfb76f6e55d14ecdc3d4e59fc855009", 0x31}, {&(0x7f0000001440)="a8435f56633234f7ee6501e873d9e60a8e78db754eec275650c0701277f4aba91364adccd040eb8ab0abef548c9e0e5d5c451823e70c4189e1c18aeed9573be30a011cde6c1bbffae15ecc205821f5e78f3e3cfb79adee0378bc188b", 0x5c}, {&(0x7f00000014c0)="7fc818ee0c2bf060a8ee7fa247461e0e698f265af15c7a8b52fcacdb6a4ec85d9018b4034ac46a357e8633fb6ff61313fcfb42b607882daf6572a38c55e342d55bcdc633af5f782ae1db45586b8852530c519edfbd27543560da1d458b295b3d876b7318008a8af91467d337347ecf28e2bbf5b3be4d307b05382a818cf5e68c5c", 0x81}, {&(0x7f0000001580)="88b2a0564b613ccb7166267ae95f769812a41617ca15f276217abd46b71a015c50e0f1035231308cc132148c70d32ff8cb99440de80bb20bd38d9a71e94d90", 0x3f}, {&(0x7f00000015c0)="7fc802e9da54aafa24ee55361f87ff0ff224cca28870e92d6e795b9e46c04bea464f3397f316f2553ee355bd8c897a3f210c8c96f83d89992dac938c8dfdf95fcfda317fc6234e38537164376a66dafb33ef57bd70de6e68d0d9f7c5f6c533cd3d611b5bd6a6ea4acaafa21c2caa63c282fe289b7b68f4ec25ab71f6f5c539ccc2a09e5fdca05eb47de84a115e021fc695c2935f190838be2b4d2ba171dbf3a6101d286b5a7bf81ce0e66c236ed6b7a5b5c970124387b3dc3b53b47ba04b7ae3cc48abef8d3545551189c8dd4b2d259584c5ba2edbefa8", 0xd7}, {&(0x7f00000016c0)="bf7e29867b4362e4c8691312a35d6b00ab3182dd71bf75591352ba10e0e847c2e71e6be91db6f886516803e3ef20af9ef9edf27dbbe781b84e0bc14abab046d651dd3c6a0086070e8283dcf09c2528e46f41fb5bac272795a9301d4320d7b69a8c981ce2edac7419faf297e0b0627f373b0b67024be587252af2ef", 0x7b}, {&(0x7f0000002d80)="e3fd84c9e536361ae7bea003acc46a0c772d363dde1aac3f0ec643dde5c4804285aebaa3380a167f827ddf87679cc016e10d3ab033f13fe7bbc5185a776705ce36fc", 0x42}, {&(0x7f0000002e00)="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", 0xff}], 0x9, &(0x7f0000002fc0)=[{0x30, 0x87, 0x8, "30c45ad3162e2f74cf4dbeef7b320f94701c8d2bcc8a7b1e2103cecc0c039f"}, {0x58, 0x10f, 0x1, "309196efda979670757eb49130c2236053c5bb09bf05a348729f3e39518ebeeda12e1a61a7bb1de50715daf501281dc6299d046e3dcaca03c6a51e274d0d0296deed4db12fe4eb5f"}, {0x110, 0x6, 0x6, "f57a7f26a25ceaae5e4ef19272fb663b37879d5bd65a1711814e0e0bb1f83dcc81eb9dc7bdf74b46d9a5ad9f74b80bc52891ed8b1deacd567648b6bb5b83fd95d04f004b19968217700f516b4d36c1383d190fbb1abdf513c7d8aa502c8738727b7a14b0d059b27388291a5fbe528601abb87453b524fd8001caf913d734ecde34b61a098356c564195200f44d1fa081a8e55b7c404d660138edc26e3e3b122ba4b3fc7495422ac0c635e209fe9b008b3568cc1981b2ac116135fb522f5c618b09fef5a9ce9321d97e1ebf40e9611066c71c5816d13825c49ba171bfbf21077675df2b68358ee4293c939024035016ceabb7ed03ba0251bdd6c6"}, {0xc8, 0x1, 0x7, "0f58b604f9ffc9f1d11bc3f9803cf27a6ea02a480c45fcc10b35bb4ce9d6c49bf6c9c7365a04b70ac43cb92457707a4dd9e775271903dcfbd1727788afb76ac33729a2db83f27813f9279d886c0201e17648cb4b8dbf1e680a1f5a36323b846a27fbbb66b01315497ba64e122e5aef4814f8c86f0471a44c1a1b7633ff1626c0261da9c97bd4a4c4c16143f124cf8adb3abd8969b5fe9829330180c9f53ed734021219e3ff61f2b5fd809a491e7dcdba9a70ad71ed797f"}, {0xf0, 0x116, 0x6, "f64c74bf8f8609141ba13f0acf9e4ee969c73da457842140685d315738e578469692f8dacad1e68f0ddff7f1a8eebfd8511c0ff5c60faf45071ee3daae5791751b31957a413b923ed0c5e71d44c8602785d76a962ac1ec5124e17e023f4196c2e04069825ed3baafac64d5ae9191e181fedea12c5c2dd4d1eed9be93943b45519f8c944f6610de92af5fc439df9b5623ad12a516d6032d35f2219303eb29a43e61f72a997f529164715a91becf965ac43f0c3db5bf1fc741b973cffdcc21ad40603ea114b210180526e09fc4eca144aaf4741f11328fff48bef613"}, {0x18, 0x111, 0x1, "6ae65ff539bd"}], 0x368}}, {{&(0x7f0000003340)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80, &(0x7f0000003540)=[{&(0x7f00000033c0)="332d9e144de3359a08d93e6d1c0f5b90c47853dfd9764d3eb8a25e3d00f9d5f625d922a5aecde190a44cd140e1ea0616b3b526c6ad97cae69d381021a23884abee1c83010311e344d8cf0d4a4592534ba7c7d843212d92ca75936aee9f5ccee612ed96f3485f5589566aab4e628aa99b5b5512cfe8a5db0af31e93dbb722dab4d9f9c77065281a35bd803024e7bc84768098f547a35d625a4b5bb012e2ddc8f50396abaed9b20ba4dfc7d449f9eba2cff666974469a9037095405dc61fbe4467826b8d", 0xc3}, {&(0x7f00000034c0)="67416ccae303fadeca40781afa94b58857a5f0aee18a7dae90562fafd96d4ccff7128a468927e5476316420791ec3d0861b9986e7405ba2b6cf8676f22edad5ed6f4d1f32dc68b482170b37c4297dcbce7a63f55f359e4500e71b7849f7188a2f122e37d64bf80f21ea5800014df2f1882df28cd80", 0x75}], 0x2}}], 0x6, 0x40000) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000fc0)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:02 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:03 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x25a}, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_enter(r6, 0x4c9e, 0xef62, 0x2, &(0x7f0000000280)={[0x1]}, 0x8) 21:28:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000d7b000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:03 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:04 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) 21:28:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r7 = syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000d7c000/0x3000)=nil, 0x3000, 0x8, 0x2010, r1, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000d7f000/0x1000)=nil, 0x1000, 0x1ed645be37b58868, 0x40010, r7, 0x10000000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r10, 0x4b62, &(0x7f0000000380)={0x0, 0x0}) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000280)=[r4, r5, r10, r5, 0xffffffffffffffff, r7], 0x6}, 0x3f) 21:28:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:04 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:04 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:04 executing program 4: r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:05 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) 21:28:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:05 executing program 4: r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:05 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) io_uring_enter(r4, 0x476c, 0x3eb4, 0x2, &(0x7f0000000500)={[0x314a]}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r8, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=@sco={0x1f, @fixed={[], 0x12}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)="a9979b340513f8528d85c0d37fc89e79c5b590dbfadb030c9fa539182bb58b0c5956310ddf1517fb1840c120873542d8874c18d66de7f8173fd3a42aa393fc13c70318d7337a73ba2edfe0c491e40aa59ec72eeb4a2ad1e3d64ee66e42d66310a1be4692998fe6cec66bddc11892f812078437df8ceebcef3d2b613e27", 0x7d}, {&(0x7f0000000100)="7ce3b8ee3bd343", 0x7}, {&(0x7f00000006c0)="6be324", 0x3}, {&(0x7f0000000700)="b3bc361b737c3c6c54574956bbbb3772b623c7e95d48b2c726a8f9e5a8677b204fcbaa66eaeae5fe60914fc9a620417adcb686e18e03ff4a40b0dd26870b6ef6f4df1cab86142111a73477a6613c9b97fc9f373afac0a8a0340c920c84aa02ff8430f3e79dc1615783f00780af274483785d1ce48ed86864120c6a828b982bfc2c9e1d052fdf9d62799a9b9ef79698bd4246f9efde", 0x95}, {&(0x7f00000007c0)="a3e405c98cd48bbc776c402619e4d619db5e01d16724fbf5978cbcb60aaa56511fc0076a05417767d789584587e159d88265945b6c830c7da7af191d8df6ef9fe25bc5ce8b91aa60a8aecc5cad037d4b7ae36be32ae8e7f5b67c438d3d2eaef879aab411c8389004031565a75d2a4544111b6cda4362f09ab58b7fa50981b0da743f362c48ee83f43948433b5ad0364a1a2bf7bb030ffa7a9ccabea652e39b1222aee3ae8b3a5fa7c5460e80bc58bb77417800d0be0a02a85927d7728edc9d882302fad229a07d61f4009e8d8e7a130820fee8cb81b56655b24156a2450445fe9afd26f2f9133281a2d5c4d5152f92fa522e95cdac252e9020", 0xf9}, {&(0x7f00000008c0)="b315262eb58f17823cab1c2be42965b60799669c1539ab220cd2f61731f1dfa7667b41b3dc09b0d5b97525ca802e1e9405213912b99655062e4fbf21fe73bd5e587f33e75d423813230bfdd232378b13f990028e451c73", 0x57}, {&(0x7f0000000940)="9e04b6dabcab71c4fe968c3b03f2196cc06e42ce52b075", 0x17}, {&(0x7f0000000c00)="cb1ed557a4c54b58071bec9821d0e57424f2e0febe4e088e61e377c9d0db6587295bad7903abfe24b280dadcca419efcb5f8ec104dfc2201fed4a94b950ed3d83e84ec0ad82c41db8b7e354954ff16f87aac5c240fda9fb56490424befcb49f2e06c58b68d60133484bce9fcd641423ab119e39032fcd6b5215da8408c2b03a690e9c6cc133b8d0e3829b652d9147ad2aa2f541dd81b1b23703de2e66bd527ce622c3678bed84319cb1b636076af3a9aa9a7452fcd0fd27b4824d87c69c8d3c5a3e48a60fdfdf89e279c13ad6d6e864c1f2419e09f5a4bebbf1b78ed3ef5e2ac81f8e130aabbc83f182c2669314f", 0xee}, {&(0x7f0000000a80)="4be600c510d31670f601d59048dedaf48d0d6b16146158fbfe855d5acb8664afd389db981c2d22e1606073797ba867d9b94d4d81cacbaf3e7b0005c0c07a48e2ee29390bad0ca7d37fdd88e0488d19e020dc16f935f1d87e4262e67a44074c83f295b543683044f0f025927499442814e787a0", 0x73}, {&(0x7f0000001800)="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", 0x1000}], 0xa}, 0x0, 0x40008d0}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000004c0)=0x7, 0x4) ioctl$sock_ifreq(r9, 0x8948, &(0x7f0000000280)={'xfrm0\x00', @ifru_ivalue}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2000000, 0x8010, r6, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00', 0x160, 0x80, 0x12345}, 0xffff7fff) syz_io_uring_submit(r10, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f0000000340)="d261199309cd47c4f549d1904b9022b2e44979891a51fd8641afaafab39fc77c9ccb4a18fa08ace31ef245a82faf129535f9a24fe6adb53d19b786a2b61e28d49843b7f7f602bb16e16230050d6f5df90c23b5fb8b266b81cf4567f5da3adf12594a36b35e011ee9a422d016a1184865800578e429ec797adfde7e933a2ebfe612dd4d5b3733a414f1acfbb40a4e6510620b201950f041a4efffcaf192781f55c278a3d94fec7b3b7a1245af02983d559018ab727fd874602e2712008c30697237a44420f255c53e15d877d2388fc097436a9bd52e4c859e5358816b76ebcca1bfcf056d7f", 0xe5, 0xc08d19b0a98e4bcb}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:06 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:06 executing program 4: r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:06 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:07 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:07 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) 21:28:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) sendfile(r1, r7, 0x0, 0x81) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r8, 0x0) io_uring_enter(r8, 0x2318, 0xd89c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000340)={0x0, 0x5397}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000d7c000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0x10000000) syz_io_uring_submit(r9, r11, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0x5) 21:28:07 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r4, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:07 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x8, 0x100, 0x2) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:07 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:07 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r5, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@generic={0x2, "7bf8f7f96b6fc28ade58976032350baf685a79aeb8463a7dcbfe466cde58f22292d1ad3f15b9f24422758f8a82922618a728f0abfa324861ac03de64c044b72539e54760866c0744e566bbef750745fe3d6f6fb1772d5068b7af5eaa93cd23dd365353fccd187314f69abcefdd005971137fc47e5a31d400994480384ec4"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)="5a6960973b4602a52b465a590291406e6769d048356fe79814b50bc596ae4436daf7f89ef369b1389fd41e555356f95d6f4d", 0x32}, {&(0x7f0000000380)="39ad040135d0e01b8259fb72e0a62759a3da76ffc46b6c6f1d1be5c2dd774ee4a800fa5af407f3914fb7aa47242a70f261d14e600754598dc7b5f1da9648b3dca6e0492d6410942f0e08b9576d2cb8fdc049d4f82cdc0f2309c9f9eb4f5d6bec842a01856ef7d5a020f348ec6f61951b773a1bfcb18272329cd93c05ffe94f80474c2cf64cee1dec63ed7f9085e148a2e2b81289ad78f9fe8931c06a1bf226732c039b749ece15621160d231b1767b314229526558bfa8e41a4d43558374a3e4b84448e8ca3216bd673c60593a9142df3a99d1882fb85af68a1bf258b9a5a11ccfa9349637a9fe61a54b7c", 0xeb}, {&(0x7f0000000480)="cd41130d3f", 0x5}, {&(0x7f00000004c0)="66d60546a5d5a9a968bffd6d1491436d0cd050a75032c79fba45078c9d071485f7688bc36003768da174e3d99452156d6bbf0db0f1e9a0d87303f61ed8cc552852671156c08eacae60217fc73497ba5927db42d7f847d5539af609868867911e2308eacfb44c6e54f3ea6608590d37024fcf844e6ddb001b3001b322c23c16d2dff98e131378d165e1dc71c347194e57ccbc583da3c1d8dbda71836e36dc24fb6643a2627fba221b1a80976a20d67d888675f6812b2bd9de7d04cbc463cea9aa7e7dbc8a0e", 0xc5}], 0x4, &(0x7f0000000600)=[{0xd8, 0x114, 0x401, "8c580e75b9c55948ceca7bf14bbee558e85b8b82f2efe219fd92cce7dd94dcd17b78c4c1e986828b98a99d7da73cd014fdf412ce6e85f171b7d3b6d6a29c29594373ee1cbe5e59ba5cf2929dde204f1426ab649ca0548987c5ebcc8a7d4fc7bd1ec9640ec9e87789fddaac6e70fd007b185bbae80ee3eb8f328dd71bbf01ac4831b7874aa2cad3b76609b510ac7ed4a04646ee9c3fd3a30d87be38723aa662e64195f295ae97c5dd081d79a4726ceb6a104a534f00d802ae7cb7440a642eb1395b38a2425743adbf"}], 0xd8}, 0x0, 0x4000}, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 21:28:09 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:09 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:09 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:09 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:09 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, 0x0, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 594.869418][T24363] BPF:[1] TYPEDEF [ 594.889118][T24363] BPF:type_id=6 [ 594.909364][T24363] BPF: 21:28:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 594.925339][T24363] BPF:Invalid name [ 594.952813][T24363] BPF: [ 594.952813][T24363] 21:28:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:10 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:10 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, 0x0, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 596.088391][T24400] BPF:[1] TYPEDEF 21:28:10 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:10 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, 0x0, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 596.117902][T24400] BPF:type_id=6 [ 596.147727][T24400] BPF: [ 596.158304][T24400] BPF:Invalid name [ 596.165137][T24400] BPF: [ 596.165137][T24400] 21:28:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:10 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 596.474674][T24424] BPF:[1] TYPEDEF [ 596.495646][T24424] BPF:type_id=6 [ 596.500478][T24424] BPF: [ 596.516092][T24424] BPF:Invalid name [ 596.527135][T24424] BPF: [ 596.527135][T24424] 21:28:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:11 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:11 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:12 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 597.523258][T24440] BPF:[1] TYPEDEF [ 597.539779][T24440] BPF:type_id=6 [ 597.556635][T24440] BPF: [ 597.567919][T24440] BPF:Invalid name 21:28:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:12 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 597.596306][T24440] BPF: [ 597.596306][T24440] 21:28:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:12 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$nbd(0xffffffffffffffff, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:12 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 597.780127][T24462] BPF:[1] TYPEDEF [ 597.804019][T24462] BPF:type_id=6 [ 597.821144][T24462] BPF: [ 597.838971][T24462] BPF:Invalid name [ 597.858286][T24462] BPF: [ 597.858286][T24462] 21:28:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:13 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:13 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 598.906766][T24486] BPF:[1] TYPEDEF [ 598.918663][T24486] BPF:type_id=6 [ 598.931559][T24486] BPF: [ 598.940870][T24486] BPF:Invalid name [ 598.952734][T24486] BPF: 21:28:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 598.952734][T24486] 21:28:13 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:13 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 599.086680][T24500] BPF:[1] TYPEDEF 21:28:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 599.114852][T24500] BPF:type_id=6 [ 599.130472][T24500] BPF: [ 599.154204][T24500] BPF:Invalid name 21:28:13 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 599.167456][T24500] BPF: [ 599.167456][T24500] 21:28:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:13 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:13 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x0, 0x2, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 599.564644][T24529] BPF:[1] TYPEDEF [ 599.569482][T24529] BPF:type_id=6 [ 599.574110][T24529] BPF: [ 599.577940][T24529] BPF:Invalid name [ 599.582639][T24529] BPF: [ 599.582639][T24529] 21:28:14 executing program 1: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:14 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:14 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x0, 0x0, 0x1, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 599.821000][T24546] BPF:[1] TYPEDEF [ 599.855448][T24546] BPF:type_id=6 [ 599.877807][T24546] BPF: 21:28:14 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x0, 0x0, 0x0, 0x2, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 599.900952][T24546] BPF:Invalid name 21:28:14 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 599.939640][T24546] BPF: [ 599.939640][T24546] 21:28:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:14 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:14 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640)={0x67446698, 0x0, 0x0, 0x0, 0x0, "01e9fd9835de0d282411ae6df39086460b6270fed5a977692f78b7aebfa583f4244d69658e9b4a52bbefa13b0ccc33957c2348b0e23cd707695684f9037d6c3db64250438a724287b203757c18b4b934448b77239f5c0e75c616e9a412e9675b68632bbf454442a3dcf33805fac88d62a64fda5a3b43ba00e90cde7ae60762191011026ed678d0205d1a3c1cbf242f6379cc05cfb5558642d24e4c130754f1ee"}, 0xb0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:14 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 600.280382][T24577] BPF:[1] TYPEDEF [ 600.351598][T24577] BPF:type_id=6 [ 600.371963][T24577] BPF: [ 600.388596][T24577] BPF:Invalid name [ 600.429510][T24577] BPF: [ 600.429510][T24577] 21:28:15 executing program 1: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:15 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:15 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:15 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 600.783058][T24599] BPF:[1] TYPEDEF [ 600.812516][T24599] BPF:type_id=6 21:28:15 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 600.841727][T24599] BPF: 21:28:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 600.873392][T24599] BPF:Invalid name [ 600.882819][T24599] BPF: [ 600.882819][T24599] 21:28:15 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:15 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:15 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 601.043957][T24620] BPF:[1] TYPEDEF [ 601.055628][T24620] BPF:type_id=6 [ 601.064855][T24620] BPF: [ 601.068010][T24620] BPF:Invalid name [ 601.081808][T24620] BPF: [ 601.081808][T24620] 21:28:16 executing program 1: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:16 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:16 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:16 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 601.829317][T24651] BPF:[1] TYPEDEF 21:28:16 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 601.861116][T24651] BPF:type_id=6 [ 601.899315][T24651] BPF: [ 601.916455][T24651] BPF:Invalid name [ 601.939659][T24651] BPF: [ 601.939659][T24651] 21:28:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, 0x0, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:16 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 602.174612][T24674] BPF:[1] TYPEDEF [ 602.180390][T24674] BPF:type_id=6 [ 602.185111][T24674] BPF: [ 602.189220][T24674] BPF:Invalid name [ 602.195924][T24674] BPF: [ 602.195924][T24674] 21:28:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:17 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, 0x0, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:17 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 602.715634][T24686] BPF:[1] TYPEDEF [ 602.734110][T24686] BPF:type_id=6 21:28:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:17 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 602.763469][T24686] BPF: [ 602.779699][T24686] BPF:Invalid name [ 602.800488][T24686] BPF: [ 602.800488][T24686] 21:28:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, 0x0, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:17 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:18 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:18 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r3, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:18 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:18 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:18 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:18 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 604.117223][T24765] BPF:[1] TYPEDEF [ 604.130648][T24765] BPF:type_id=6 [ 604.139703][T24765] BPF: [ 604.146380][T24765] BPF:Invalid name [ 604.167076][T24765] BPF: [ 604.167076][T24765] 21:28:18 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 604.402330][T24781] BPF:[1] TYPEDEF [ 604.413909][T24781] BPF:type_id=6 [ 604.421072][T24781] BPF: [ 604.429452][T24781] BPF:Invalid name [ 604.444598][T24781] BPF: [ 604.444598][T24781] 21:28:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:19 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:19 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 604.715004][T24794] BPF:[1] TYPEDEF [ 604.730419][T24794] BPF:type_id=6 [ 604.754463][T24794] BPF: 21:28:19 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 604.769459][T24794] BPF:Invalid name [ 604.789103][T24794] BPF: [ 604.789103][T24794] 21:28:19 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:19 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 605.037439][T24822] BPF:[1] TYPEDEF [ 605.060102][T24822] BPF:type_id=6 [ 605.072600][T24822] BPF: [ 605.086098][T24822] BPF:Invalid name [ 605.107207][T24822] BPF: [ 605.107207][T24822] 21:28:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:20 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:20 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:20 executing program 4: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:20 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 605.704145][T24846] BPF:[1] TYPEDEF 21:28:20 executing program 4: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 605.751594][T24846] BPF:type_id=6 [ 605.756704][T24846] BPF: [ 605.759585][T24846] BPF:Invalid name 21:28:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac434000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 605.823263][T24846] BPF: [ 605.823263][T24846] 21:28:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:20 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:20 executing program 4: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000640), 0x10) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 605.966607][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.090251][T24889] BPF:[1] TYPEDEF [ 606.095206][T24889] BPF:type_id=6 [ 606.099314][T24889] BPF: [ 606.102471][T24889] BPF:Invalid name [ 606.106573][T24889] BPF: [ 606.106573][T24889] [ 606.137541][T24866] bond4: (slave bridge3): Enslaving as an active interface with an up link 21:28:21 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:21 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 606.674365][T24925] BPF:[1] TYPEDEF 21:28:21 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 606.695740][T24925] BPF:type_id=6 21:28:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:21 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 606.728549][T24925] BPF: [ 606.745467][T24925] BPF:Invalid name [ 606.755650][T24925] BPF: [ 606.755650][T24925] 21:28:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:21 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:21 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000640), 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 607.023495][T24946] BPF:[1] TYPEDEF [ 607.041280][T24946] BPF:type_id=6 [ 607.057062][T24946] BPF: 21:28:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 607.070716][T24946] BPF:Invalid name [ 607.090192][T24946] BPF: [ 607.090192][T24946] 21:28:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:21 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r6, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x80, 0x8, 0x0, 0x203, 0x0, r7}, &(0x7f00003f7000/0x4000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000380)={{{0xc, 0x1}}, 0x1f, 0x1000, &(0x7f0000000340)="2cb0c1e1e81553481b47fef80f33f7c1116ac170682209a5774a9a5f9561a9"}) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 607.602376][T24974] BPF:[1] TYPEDEF [ 607.619876][T24974] BPF:type_id=6 [ 607.629789][T24974] BPF: [ 607.639963][T24974] BPF:Invalid name 21:28:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r6, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x80, 0x8, 0x0, 0x203, 0x0, r7}, &(0x7f00003f7000/0x4000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000380)={{{0xc, 0x1}}, 0x1f, 0x1000, &(0x7f0000000340)="2cb0c1e1e81553481b47fef80f33f7c1116ac170682209a5774a9a5f9561a9"}) close_range(r0, 0xffffffffffffffff, 0x0) [ 607.651813][T24974] BPF: [ 607.651813][T24974] 21:28:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:22 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 607.846865][T24989] BPF:[1] TYPEDEF [ 607.858437][T24989] BPF:type_id=6 [ 607.866936][T24989] BPF: [ 607.875604][T24989] BPF:Invalid name [ 607.886163][T24989] BPF: [ 607.886163][T24989] 21:28:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r6, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x80, 0x8, 0x0, 0x203, 0x0, r7}, &(0x7f00003f7000/0x4000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000380)={{{0xc, 0x1}}, 0x1f, 0x1000, &(0x7f0000000340)="2cb0c1e1e81553481b47fef80f33f7c1116ac170682209a5774a9a5f9561a9"}) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:22 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r5, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x80, 0x8, 0x0, 0x203, 0x0, r6}, &(0x7f00003f7000/0x4000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000380)={{{0xc, 0x1}}, 0x1f, 0x1000, &(0x7f0000000340)="2cb0c1e1e81553481b47fef80f33f7c1116ac170682209a5774a9a5f9561a9"}) 21:28:22 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 608.586725][T25015] BPF:[1] TYPEDEF [ 608.609348][T25015] BPF:type_id=6 [ 608.624469][T25015] BPF: [ 608.641056][T25015] BPF:Invalid name [ 608.652284][T25015] BPF: [ 608.652284][T25015] 21:28:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:23 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:23 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r5, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740)={0x0, 0x80, 0x8, 0x0, 0x203, 0x0, r6}, &(0x7f00003f7000/0x4000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r5, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 609.048117][T25034] BPF:[1] TYPEDEF [ 609.054685][T25034] BPF:type_id=6 [ 609.064747][T25034] BPF: [ 609.075060][T25034] BPF:Invalid name [ 609.083541][T25034] BPF: [ 609.083541][T25034] 21:28:23 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:23 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:23 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r5, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250600000008000200030000000800030001000000080002000400000008000300050000001c000180050002000b000000060001000a000000080007006f4b3c6c5708552a0109c56fd46dabc67b647058601e23c99a2d05460503b7ac72f689b647eba27e99d78210355998d2efc5d24b7aae2f6d082a8bbb52ce2144b285c7a7400f745021f86b9fc0a34facd2ebe1f23c645bd4b2f950e9c51daba03402dc854b43655b91560ca63063293bcb09eb9f86b9493d54b91e8c75b211fe4f6c56a8c90b4400dacd", @ANYRES32=0x0, @ANYBLOB="0800030000000700000000000000000008000300040891c500000008000200020000000c000180060005004e"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044081) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:23 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 609.543225][T25061] BPF:[1] TYPEDEF [ 609.572864][T25061] BPF:type_id=6 [ 609.586380][T25061] BPF: [ 609.596155][T25061] BPF:Invalid name [ 609.604762][T25061] BPF: [ 609.604762][T25061] 21:28:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:24 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:24 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:24 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r5, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80004, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 610.282033][T25082] BPF:[1] TYPEDEF [ 610.297959][T25082] BPF:type_id=6 [ 610.308014][T25082] BPF: [ 610.318278][T25082] BPF:Invalid name [ 610.327651][T25082] BPF: 21:28:24 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:24 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 610.327651][T25082] 21:28:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:24 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r5, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:25 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 610.550946][T25102] BPF:[1] TYPEDEF [ 610.561172][T25102] BPF:type_id=6 [ 610.566586][T25102] BPF: [ 610.571022][T25102] BPF:Invalid name [ 610.577760][T25102] BPF: [ 610.577760][T25102] 21:28:26 executing program 3: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21:28:26 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:26 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21:28:26 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:26 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:26 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:27 executing program 3: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:27 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21:28:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/161, 0x0, 0xa1, 0x8}, 0x20) 21:28:27 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 613.185158][T25193] BPF:hdr_len not found 21:28:28 executing program 3: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:28:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/161, 0x0, 0xa1, 0x8}, 0x20) 21:28:28 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 614.322448][T25225] BPF:hdr_len not found 21:28:28 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/161, 0x0, 0xa1, 0x8}, 0x20) 21:28:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:28 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 614.499407][T25239] BPF:hdr_len not found 21:28:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x1c, 0xa1, 0x8}, 0x20) 21:28:30 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:30 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x417f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ca}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 615.667958][T25272] BPF:No type found 21:28:30 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x1c, 0xa1, 0x8}, 0x20) 21:28:30 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 615.886414][T25287] BPF:No type found 21:28:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:31 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x1c, 0xa1, 0x8}, 0x20) 21:28:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 616.950688][T25308] BPF:No type found 21:28:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x0, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:31 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, 0x0, 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 617.125142][T25320] BPF:[1] TYPEDEF (anon) [ 617.143377][T25320] BPF:type_id=6 [ 617.157282][T25320] BPF: 21:28:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 617.174106][T25320] BPF:Invalid name [ 617.194713][T25320] BPF: [ 617.194713][T25320] 21:28:32 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:32 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x0, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, 0x0, 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 618.427335][T25355] BPF:[1] TYPEDEF (anon) [ 618.441108][T25355] BPF:type_id=6 [ 618.459651][T25355] BPF: 21:28:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, 0x0, 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:32 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:32 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 618.480968][T25355] BPF:Invalid name [ 618.499173][T25355] BPF: [ 618.499173][T25355] 21:28:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x0, 0x0, 0x0, 0x8, 0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600), 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:33 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 618.684983][T25369] BPF:[1] TYPEDEF (anon) [ 618.697094][T25369] BPF:type_id=6 [ 618.707934][T25369] BPF: [ 618.716344][T25369] BPF:Invalid name [ 618.726337][T25369] BPF: [ 618.726337][T25369] 21:28:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:34 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600), 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:34 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 619.961049][T25397] BPF:[1] TYPEDEF [ 619.975497][T25397] BPF:type_id=0 [ 619.988974][T25397] BPF: [ 620.003637][T25397] BPF:Invalid name 21:28:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:34 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 620.016705][T25397] BPF: [ 620.016705][T25397] 21:28:34 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600), 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/161, 0x27, 0xa1, 0x8}, 0x20) 21:28:34 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 620.280985][T25416] BPF:[1] Invalid name_offset:3 21:28:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21:28:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/161, 0x27, 0xa1, 0x8}, 0x20) 21:28:35 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:35 executing program 4: r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 621.348820][T25436] BPF:[1] Invalid name_offset:3 21:28:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/161, 0x27, 0xa1, 0x8}, 0x20) 21:28:35 executing program 4: r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 621.491313][T25447] BPF:[1] Invalid name_offset:3 21:28:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/161, 0x27, 0xa1, 0x8}, 0x20) [ 621.740620][T25460] BPF:[1] Invalid name_offset:3 21:28:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:37 executing program 4: r0 = syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21:28:37 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/161, 0x27, 0xa1, 0x8}, 0x20) 21:28:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:37 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 622.796361][T25479] BPF:[1] Invalid name_offset:3 21:28:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/161, 0x0, 0xa1, 0x8}, 0x20) 21:28:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/161, 0x27, 0xa1, 0x8}, 0x20) 21:28:37 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:37 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 623.029037][T25497] BPF:hdr_len not found [ 623.088638][T25499] BPF:[1] Invalid name_offset:3 21:28:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/161, 0x0, 0xa1, 0x8}, 0x20) 21:28:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x8}, 0x20) 21:28:38 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:38 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:38 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x4a30, 0x1000, 0x1, 0x0, 0x0) [ 624.155133][ T3222] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.161631][ T3222] ieee802154 phy1 wpan1: encryption failed: -22 21:28:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/161, 0x0, 0xa1, 0x8}, 0x20) [ 624.229701][T25524] BPF:hdr_len not found 21:28:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x8}, 0x20) 21:28:38 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 624.375495][T25538] BPF:hdr_len not found 21:28:38 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x8}, 0x20) 21:28:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x1d, 0xa1, 0x8}, 0x20) 21:28:39 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:39 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x4a30, 0x1000, 0x1, 0x0, 0x0) 21:28:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 625.604414][T25571] BPF:No type found 21:28:40 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x1000, 0x1, 0x0, 0x0) 21:28:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x1d, 0xa1, 0x8}, 0x20) 21:28:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1}, 0x20) 21:28:40 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 625.828821][T25588] BPF:No type found 21:28:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1}, 0x20) 21:28:40 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x1d, 0xa1, 0x8}, 0x20) 21:28:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1}, 0x20) [ 626.074699][T25602] BPF:No type found 21:28:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, 0x0, &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:41 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x0, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x8}, 0x20) 21:28:41 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x1000, 0x1, 0x0, 0x0) 21:28:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x0, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 627.194912][T25630] BPF:[1] TYPEDEF (anon) [ 627.199554][T25630] BPF:type_id=0 [ 627.204970][T25630] BPF: [ 627.207976][T25630] BPF:Invalid name [ 627.213032][T25630] BPF: [ 627.213032][T25630] 21:28:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:41 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:41 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac43400", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) [ 627.388408][T25639] BPF:[1] TYPEDEF (anon) [ 627.404438][T25639] BPF:type_id=0 [ 627.414496][T25639] BPF: [ 627.420938][T25639] BPF:Invalid name [ 627.433946][T25639] BPF: [ 627.433946][T25639] 21:28:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x0, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 627.510480][T25647] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 627.631290][T25652] BPF:[1] TYPEDEF (anon) [ 627.647953][T25652] BPF:type_id=0 [ 627.656404][T25652] BPF: [ 627.659368][T25652] BPF:Invalid name [ 627.667025][T25652] BPF: [ 627.667025][T25652] 21:28:42 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:42 executing program 5 (fault-call:3 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:42 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x1000, 0x1, 0x0, 0x0) 21:28:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 628.574997][T25673] FAULT_INJECTION: forcing a failure. [ 628.574997][T25673] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 628.591281][T25673] CPU: 0 PID: 25673 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 628.600078][T25673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.610244][T25673] Call Trace: [ 628.613543][T25673] dump_stack+0x176/0x24e [ 628.617898][T25673] should_fail+0x384/0x4b0 [ 628.622341][T25673] _copy_from_user+0x2d/0x170 [ 628.627152][T25673] __do_sys_bpf+0x137/0x11160 [ 628.631917][T25673] ? __context_tracking_exit+0x7a/0xd0 [ 628.637416][T25673] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 628.643519][T25673] ? lockdep_hardirqs_on+0x8d/0x130 [ 628.647577][T25679] BPF:[1] TYPEDEF [ 628.648739][T25673] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 628.648772][T25673] do_syscall_64+0x2d/0x70 [ 628.648795][T25673] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 628.648817][T25673] RIP: 0033:0x466459 [ 628.666709][T25679] BPF:type_id=0 [ 628.668872][T25673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.668895][T25673] RSP: 002b:00007f3b638c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.668919][T25673] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 628.668933][T25673] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 628.668946][T25673] RBP: 00007f3b638c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.668959][T25673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.693696][T25679] BPF: [ 628.695923][T25673] R13: 00007fffa2642cef R14: 00007f3b638c4300 R15: 0000000000022000 21:28:43 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 628.777434][T25679] BPF:Invalid name [ 628.801025][T25679] BPF: [ 628.801025][T25679] 21:28:43 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:43 executing program 5 (fault-call:3 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:43 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 628.964693][T25695] BPF:[1] TYPEDEF [ 628.972363][T25694] FAULT_INJECTION: forcing a failure. [ 628.972363][T25694] name failslab, interval 1, probability 0, space 0, times 1 [ 628.993197][T25695] BPF:type_id=0 [ 629.000361][T25695] BPF: [ 629.011256][T25695] BPF:Invalid name [ 629.019687][T25694] CPU: 0 PID: 25694 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 629.028509][T25694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.038595][T25694] Call Trace: [ 629.041909][T25694] dump_stack+0x176/0x24e [ 629.046260][T25694] should_fail+0x384/0x4b0 [ 629.050692][T25694] ? btf_new_fd+0x10e/0x2790 [ 629.055301][T25694] should_failslab+0x5/0x20 [ 629.059912][T25695] BPF: [ 629.059912][T25695] [ 629.059897][T25694] kmem_cache_alloc_trace+0x6a/0x350 [ 629.070059][T25694] btf_new_fd+0x10e/0x2790 [ 629.074507][T25694] ? cap_capable+0x27e/0x2d0 [ 629.079210][T25694] ? safesetid_security_capable+0xad/0x1d0 [ 629.085079][T25694] ? bpf_lsm_capable+0x5/0x10 [ 629.089878][T25694] ? security_capable+0xb1/0xd0 [ 629.094757][T25694] __do_sys_bpf+0x1824/0x11160 [ 629.099579][T25694] ? __context_tracking_exit+0x7a/0xd0 [ 629.105071][T25694] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 629.111078][T25694] ? lockdep_hardirqs_on+0x8d/0x130 [ 629.116302][T25694] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 629.122302][T25694] do_syscall_64+0x2d/0x70 [ 629.126848][T25694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 629.132786][T25694] RIP: 0033:0x466459 [ 629.136695][T25694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 629.156340][T25694] RSP: 002b:00007f3b638c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 21:28:43 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 629.164914][T25694] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 629.172903][T25694] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 629.180889][T25694] RBP: 00007f3b638c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.188879][T25694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.196889][T25694] R13: 00007fffa2642cef R14: 00007f3b638c4300 R15: 0000000000022000 21:28:43 executing program 5 (fault-call:3 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 629.337841][T25708] BPF:[1] TYPEDEF [ 629.343588][T25708] BPF:type_id=0 [ 629.347296][T25708] BPF: [ 629.350259][T25708] BPF:Invalid name [ 629.358617][T25708] BPF: [ 629.358617][T25708] [ 629.370871][T25709] FAULT_INJECTION: forcing a failure. [ 629.370871][T25709] name failslab, interval 1, probability 0, space 0, times 0 [ 629.411544][T25709] CPU: 0 PID: 25709 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 629.420364][T25709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.430444][T25709] Call Trace: [ 629.433753][T25709] dump_stack+0x176/0x24e [ 629.438116][T25709] should_fail+0x384/0x4b0 [ 629.442574][T25709] ? btf_new_fd+0x252/0x2790 [ 629.447212][T25709] should_failslab+0x5/0x20 [ 629.451746][T25709] kmem_cache_alloc_trace+0x6a/0x350 [ 629.457060][T25709] ? btf_new_fd+0x10e/0x2790 [ 629.461680][T25709] btf_new_fd+0x252/0x2790 [ 629.466130][T25709] ? cap_capable+0x27e/0x2d0 [ 629.470744][T25709] ? safesetid_security_capable+0xad/0x1d0 [ 629.476576][T25709] ? bpf_lsm_capable+0x5/0x10 [ 629.481284][T25709] ? security_capable+0xb1/0xd0 [ 629.486170][T25709] __do_sys_bpf+0x1824/0x11160 [ 629.491093][T25709] ? __context_tracking_exit+0x7a/0xd0 [ 629.496634][T25709] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 629.502677][T25709] ? lockdep_hardirqs_on+0x8d/0x130 [ 629.507914][T25709] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 629.513923][T25709] do_syscall_64+0x2d/0x70 [ 629.518372][T25709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 629.524315][T25709] RIP: 0033:0x466459 [ 629.528247][T25709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 629.548044][T25709] RSP: 002b:00007f3b638c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.556544][T25709] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 629.564564][T25709] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 629.572571][T25709] RBP: 00007f3b638c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.580598][T25709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.588596][T25709] R13: 00007fffa2642cef R14: 00007f3b638c4300 R15: 0000000000022000 21:28:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:44 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x0, 0x1, 0x0, 0x0) 21:28:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:44 executing program 5 (fault-call:3 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 629.754109][T25718] BPF:[1] TYPEDEF [ 629.757979][T25718] BPF:type_id=0 [ 629.778486][T25718] BPF: [ 629.781301][T25718] BPF:Invalid name [ 629.794637][T25723] FAULT_INJECTION: forcing a failure. [ 629.794637][T25723] name failslab, interval 1, probability 0, space 0, times 0 [ 629.810967][T25718] BPF: [ 629.810967][T25718] [ 629.844087][T25723] CPU: 1 PID: 25723 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 21:28:44 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 629.853256][T25723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.863342][T25723] Call Trace: [ 629.866650][T25723] dump_stack+0x176/0x24e [ 629.871008][T25723] should_fail+0x384/0x4b0 [ 629.875454][T25723] ? kvmalloc_node+0x81/0xf0 [ 629.880145][T25723] should_failslab+0x5/0x20 [ 629.884681][T25723] __kmalloc_node+0x90/0x430 [ 629.889343][T25723] kvmalloc_node+0x81/0xf0 [ 629.893786][T25723] btf_new_fd+0x292/0x2790 [ 629.898237][T25723] ? cap_capable+0x27e/0x2d0 [ 629.902855][T25723] ? safesetid_security_capable+0xad/0x1d0 [ 629.908690][T25723] ? bpf_lsm_capable+0x5/0x10 [ 629.913594][T25723] ? security_capable+0xb1/0xd0 [ 629.918479][T25723] __do_sys_bpf+0x1824/0x11160 [ 629.923312][T25723] ? __context_tracking_exit+0x7a/0xd0 [ 629.928824][T25723] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 629.934827][T25723] ? lockdep_hardirqs_on+0x8d/0x130 [ 629.940056][T25723] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 629.946065][T25723] do_syscall_64+0x2d/0x70 [ 629.950514][T25723] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 629.956445][T25723] RIP: 0033:0x466459 [ 629.960359][T25723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 629.980082][T25723] RSP: 002b:00007f3b638c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.988555][T25723] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 629.996551][T25723] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 21:28:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 630.004553][T25723] RBP: 00007f3b638c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.012580][T25723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.020578][T25723] R13: 00007fffa2642cef R14: 00007f3b638c4300 R15: 0000000000022000 21:28:44 executing program 5 (fault-call:3 fault-nth:4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x0, 0x0, 0x0, 0x0) 21:28:44 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 630.133540][T25743] BPF:[1] TYPEDEF [ 630.138209][T25743] BPF:type_id=0 [ 630.143839][T25743] BPF: [ 630.146654][T25743] BPF:Invalid name [ 630.150377][T25743] BPF: [ 630.150377][T25743] [ 630.230584][T25752] FAULT_INJECTION: forcing a failure. [ 630.230584][T25752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.255755][T25752] CPU: 1 PID: 25752 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 630.264595][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.274763][T25752] Call Trace: [ 630.278063][T25752] dump_stack+0x176/0x24e [ 630.282431][T25752] should_fail+0x384/0x4b0 [ 630.286886][T25752] _copy_from_user+0x2d/0x170 [ 630.291591][T25752] btf_new_fd+0x308/0x2790 [ 630.296045][T25752] ? cap_capable+0x27e/0x2d0 [ 630.300662][T25752] ? safesetid_security_capable+0xad/0x1d0 [ 630.306502][T25752] ? bpf_lsm_capable+0x5/0x10 [ 630.311220][T25752] __do_sys_bpf+0x1824/0x11160 [ 630.316063][T25752] ? __context_tracking_exit+0x7a/0xd0 [ 630.321648][T25752] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 630.327650][T25752] ? lockdep_hardirqs_on+0x8d/0x130 [ 630.332905][T25752] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 630.338907][T25752] do_syscall_64+0x2d/0x70 [ 630.343353][T25752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 630.349275][T25752] RIP: 0033:0x466459 [ 630.353196][T25752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 630.372827][T25752] RSP: 002b:00007f3b638c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.381276][T25752] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 630.389269][T25752] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 630.397304][T25752] RBP: 00007f3b638c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.405296][T25752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.413287][T25752] R13: 00007fffa2642cef R14: 00007f3b638c4300 R15: 0000000000022000 21:28:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:44 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:44 executing program 0 (fault-call:8 fault-nth:0): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x0, 0x0, 0x0, 0x0) 21:28:44 executing program 5 (fault-call:3 fault-nth:5): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 630.581715][T25771] BPF:[1] TYPEDEF [ 630.585602][T25771] BPF:type_id=0 21:28:45 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 630.634203][T25771] BPF: [ 630.637768][T25771] BPF:Invalid name [ 630.651342][T25774] BPF:[1] TYPEDEF [ 630.658784][T25772] FAULT_INJECTION: forcing a failure. [ 630.658784][T25772] name failslab, interval 1, probability 0, space 0, times 0 [ 630.674331][T25771] BPF: [ 630.674331][T25771] [ 630.680456][T25774] BPF:type_id=0 [ 630.694742][T25774] BPF: [ 630.708014][T25774] BPF:Invalid name [ 630.727019][T25772] CPU: 0 PID: 25772 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 630.735835][T25772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.745913][T25772] Call Trace: [ 630.749216][T25772] dump_stack+0x176/0x24e [ 630.753580][T25772] should_fail+0x384/0x4b0 [ 630.758044][T25772] should_failslab+0x5/0x20 [ 630.762572][T25772] kmem_cache_alloc_bulk+0x68/0x3c0 [ 630.767825][T25772] io_submit_sqes+0x8da/0x79b0 [ 630.772785][T25772] ? io_uring_add_task_file+0x99/0x350 [ 630.778285][T25772] __se_sys_io_uring_enter+0x1cb/0x1cd0 [ 630.783889][T25772] ? __context_tracking_exit+0x7a/0xd0 [ 630.789427][T25772] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 630.799025][T25772] ? lockdep_hardirqs_on+0x8d/0x130 [ 630.804278][T25772] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 630.809870][T25772] do_syscall_64+0x2d/0x70 [ 630.814322][T25772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 630.820246][T25772] RIP: 0033:0x466459 [ 630.824168][T25772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 630.843826][T25772] RSP: 002b:00007f7ddf68a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 630.852626][T25772] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 630.860892][T25772] RDX: 0000000000000000 RSI: 0000000000004a30 RDI: 0000000000000004 [ 630.868893][T25772] RBP: 00007f7ddf68a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.877092][T25772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.885570][T25772] R13: 00007ffe3a47f69f R14: 00007f7ddf68a300 R15: 0000000000022000 [ 630.905648][T25774] BPF: [ 630.905648][T25774] 21:28:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 630.928956][T25774] FAULT_INJECTION: forcing a failure. [ 630.928956][T25774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.965635][T25774] CPU: 0 PID: 25774 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 630.974447][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.984522][T25774] Call Trace: [ 630.987818][T25774] dump_stack+0x176/0x24e [ 630.992172][T25774] should_fail+0x384/0x4b0 [ 630.996616][T25774] _copy_to_user+0x2d/0x130 [ 631.001148][T25774] simple_read_from_buffer+0xd9/0x160 [ 631.006634][T25774] proc_fail_nth_read+0x14f/0x1b0 [ 631.011729][T25774] ? rw_verify_area+0x1b8/0x370 [ 631.016680][T25774] ? proc_fault_inject_write+0x2c0/0x2c0 [ 631.022333][T25774] vfs_read+0x213/0xa80 [ 631.026538][T25774] ? mutex_lock_nested+0x1a/0x20 [ 631.031503][T25774] ? __fdget_pos+0x24e/0x2f0 [ 631.036215][T25774] ksys_read+0x11b/0x220 [ 631.040479][T25774] do_syscall_64+0x2d/0x70 [ 631.044919][T25774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 631.050830][T25774] RIP: 0033:0x4191dc [ 631.054743][T25774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 21:28:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:45 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 631.074372][T25774] RSP: 002b:00007f3b638c4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.082820][T25774] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc [ 631.090818][T25774] RDX: 000000000000000f RSI: 00007f3b638c41e0 RDI: 0000000000000004 [ 631.098819][T25774] RBP: 00007f3b638c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.106808][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.114801][T25774] R13: 00007fffa2642cef R14: 00007f3b638c4300 R15: 0000000000022000 21:28:45 executing program 0 (fault-call:8 fault-nth:1): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x0, 0x0, 0x0, 0x0) 21:28:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 631.180083][T25791] BPF:[1] TYPEDEF [ 631.188116][T25791] BPF:type_id=0 [ 631.220127][T25791] BPF: [ 631.224456][T25791] BPF:Invalid name [ 631.228232][T25791] BPF: [ 631.228232][T25791] [ 631.303201][T25801] BPF:[1] TYPEDEF [ 631.307357][T25801] BPF:type_id=0 [ 631.311123][T25801] BPF: [ 631.322032][T25801] BPF:Invalid name [ 631.326303][T25801] BPF: [ 631.326303][T25801] [ 631.355830][T25802] FAULT_INJECTION: forcing a failure. [ 631.355830][T25802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.384149][T25802] CPU: 1 PID: 25802 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 631.392974][T25802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.403060][T25802] Call Trace: [ 631.406366][T25802] dump_stack+0x176/0x24e [ 631.410751][T25802] should_fail+0x384/0x4b0 [ 631.415246][T25802] _copy_to_user+0x2d/0x130 [ 631.419802][T25802] simple_read_from_buffer+0xd9/0x160 [ 631.425210][T25802] proc_fail_nth_read+0x14f/0x1b0 [ 631.430269][T25802] ? rw_verify_area+0x1b8/0x370 [ 631.435251][T25802] ? proc_fault_inject_write+0x2c0/0x2c0 [ 631.440926][T25802] vfs_read+0x213/0xa80 [ 631.445154][T25802] ? mutex_lock_nested+0x1a/0x20 [ 631.450255][T25802] ? __fdget_pos+0x24e/0x2f0 [ 631.454977][T25802] ksys_read+0x11b/0x220 [ 631.459266][T25802] do_syscall_64+0x2d/0x70 [ 631.463718][T25802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 631.469645][T25802] RIP: 0033:0x4191dc [ 631.473566][T25802] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 631.493459][T25802] RSP: 002b:00007f7ddf68a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.501910][T25802] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004191dc [ 631.510380][T25802] RDX: 000000000000000f RSI: 00007f7ddf68a1e0 RDI: 0000000000000007 [ 631.518379][T25802] RBP: 00007f7ddf68a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.526556][T25802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.534547][T25802] R13: 00007ffe3a47f69f R14: 00007f7ddf68a300 R15: 0000000000022000 21:28:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:46 executing program 4: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x2, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:46 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x0, 0x0, 0x0, 0x0) [ 631.724515][T25821] BPF:[1] TYPEDEF [ 631.728515][T25821] BPF:type_id=0 [ 631.746574][T25821] BPF: [ 631.760934][T25821] BPF:Invalid name 21:28:46 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 21:28:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 631.773590][T25821] BPF: [ 631.773590][T25821] 21:28:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x3, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:46 executing program 4: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 631.913929][T25838] BPF:[1] TYPEDEF [ 631.924554][T25838] BPF:type_id=0 [ 631.947385][T25838] BPF: [ 631.950705][T25838] BPF:Invalid name [ 631.975544][T25838] BPF: [ 631.975544][T25838] 21:28:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x4, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:46 executing program 4: syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:46 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x2000, 0x0, 0x0, 0x0, 0x0) 21:28:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x5, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:46 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 632.378423][T25875] BPF:[1] TYPEDEF [ 632.390130][T25875] BPF:type_id=0 [ 632.417458][T25875] BPF: 21:28:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x6, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 632.434374][T25875] BPF:Invalid name [ 632.452130][T25875] BPF: [ 632.452130][T25875] 21:28:46 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x0, 0x0, 0x0, 0x0) 21:28:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:47 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:28:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x7, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 632.612620][T25898] BPF:[1] TYPEDEF [ 632.617661][T25898] BPF:type_id=0 [ 632.636209][T25898] BPF: [ 632.650819][T25898] BPF:Invalid name [ 632.676424][T25898] BPF: [ 632.676424][T25898] 21:28:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/57, 0x39}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}}], 0x1, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x2, 0x0, 0x0, 0x0) 21:28:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:47 executing program 4: r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:28:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x8, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x5, 0x0, 0x0, 0x0) [ 633.019266][T25924] BPF:[1] TYPEDEF 21:28:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x9, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:47 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 633.067261][T25924] BPF:type_id=0 [ 633.076376][T25924] BPF: [ 633.086686][T25924] BPF:Invalid name 21:28:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 633.126936][T25924] BPF: [ 633.126936][T25924] 21:28:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x8}, 0x20) 21:28:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0xa, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 633.252721][T25942] FAULT_INJECTION: forcing a failure. [ 633.252721][T25942] name failslab, interval 1, probability 0, space 0, times 0 [ 633.333099][T25942] CPU: 1 PID: 25942 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 633.342214][T25942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.355653][T25942] Call Trace: [ 633.359221][T25942] dump_stack+0x176/0x24e [ 633.363837][T25942] should_fail+0x384/0x4b0 [ 633.368298][T25942] should_failslab+0x5/0x20 [ 633.372834][T25942] kmem_cache_alloc_bulk+0x68/0x3c0 [ 633.378093][T25942] io_submit_sqes+0x8da/0x79b0 [ 633.382923][T25942] ? io_uring_add_task_file+0xb2/0x350 [ 633.388515][T25942] __se_sys_io_uring_enter+0x1cb/0x1cd0 [ 633.394204][T25942] ? __context_tracking_exit+0x7a/0xd0 [ 633.400420][T25942] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 633.406616][T25942] ? lockdep_hardirqs_on+0x8d/0x130 [ 633.412299][T25942] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 633.417972][T25942] do_syscall_64+0x2d/0x70 [ 633.422443][T25942] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.428936][T25942] RIP: 0033:0x466459 [ 633.433320][T25942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.455484][T25942] RSP: 002b:00007f52cc33f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 633.466749][T25942] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 633.475225][T25942] RDX: 0000000000000000 RSI: 0000000000004ab0 RDI: 0000000000000003 [ 633.483572][T25942] RBP: 00007f52cc33f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.491659][T25942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.499800][T25942] R13: 00007fff17d4e14f R14: 00007f52cc33f300 R15: 0000000000022000 21:28:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, 0x0, 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:48 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x6, 0x0, 0x0, 0x0) 21:28:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x8}, 0x20) 21:28:48 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0xb, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 633.775144][T25967] FAULT_INJECTION: forcing a failure. [ 633.775144][T25967] name failslab, interval 1, probability 0, space 0, times 0 [ 633.811504][T25967] CPU: 1 PID: 25967 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 633.821939][T25967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.835940][T25967] Call Trace: [ 633.839978][T25967] dump_stack+0x176/0x24e [ 633.844621][T25967] should_fail+0x384/0x4b0 [ 633.849366][T25967] ? __io_alloc_async_data+0xd8/0x1c0 [ 633.855889][T25967] should_failslab+0x5/0x20 [ 633.860841][T25967] __kmalloc+0x89/0x380 [ 633.865141][T25967] ? memcpy+0x3c/0x60 [ 633.869426][T25967] __io_alloc_async_data+0xd8/0x1c0 [ 633.874667][T25967] io_setup_async_rw+0xf9/0x3c0 [ 633.879757][T25967] io_issue_sqe+0x4f88/0x9480 [ 633.887095][T25967] ? rcu_lock_release+0x9/0x20 [ 633.892018][T25967] ? __fget_files+0x34f/0x380 [ 633.896743][T25967] __io_queue_sqe+0x13a/0xdc0 [ 633.902631][T25967] ? io_queue_sqe+0x164/0x870 [ 633.907517][T25967] ? rcu_read_lock_sched_held+0x41/0xb0 [ 633.913481][T25967] io_submit_sqes+0x2c5f/0x79b0 [ 633.918598][T25967] __se_sys_io_uring_enter+0x1cb/0x1cd0 [ 633.924470][T25967] ? __context_tracking_exit+0x7a/0xd0 [ 633.930705][T25967] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 633.936988][T25967] ? lockdep_hardirqs_on+0x8d/0x130 [ 633.942219][T25967] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 633.948172][T25967] do_syscall_64+0x2d/0x70 [ 633.952630][T25967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.958645][T25967] RIP: 0033:0x466459 [ 633.962563][T25967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.982979][T25967] RSP: 002b:00007f52cc33f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 633.991791][T25967] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 634.001364][T25967] RDX: 0000000000000000 RSI: 0000000000004ab0 RDI: 0000000000000003 [ 634.011453][T25967] RBP: 00007f52cc33f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.019824][T25967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.030565][T25967] R13: 00007fff17d4e14f R14: 00007f52cc33f300 R15: 0000000000022000 21:28:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x8}, 0x20) 21:28:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:48 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x7, 0x0, 0x0, 0x0) 21:28:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1}, 0x20) 21:28:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0xd, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, 0x0, 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0xe, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:49 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0xc, 0x0, 0x0, 0x0) 21:28:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1}, 0x20) 21:28:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:49 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 21:28:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1}, 0x20) [ 634.774846][T26019] FAULT_INJECTION: forcing a failure. [ 634.774846][T26019] name failslab, interval 1, probability 0, space 0, times 0 [ 634.805494][T26019] CPU: 0 PID: 26019 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 634.814753][T26019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.825882][T26019] Call Trace: [ 634.829199][T26019] dump_stack+0x176/0x24e [ 634.833593][T26019] should_fail+0x384/0x4b0 [ 634.838332][T26019] ? __io_queue_sqe+0x629/0xdc0 [ 634.844009][T26019] should_failslab+0x5/0x20 [ 634.848729][T26019] kmem_cache_alloc_trace+0x6a/0x350 [ 634.857978][T26019] __io_queue_sqe+0x629/0xdc0 [ 634.865406][T26019] ? io_queue_sqe+0x164/0x870 [ 634.873342][T26019] ? rcu_read_lock_sched_held+0x41/0xb0 [ 634.879146][T26019] io_submit_sqes+0x2c5f/0x79b0 [ 634.886534][T26019] __se_sys_io_uring_enter+0x1cb/0x1cd0 [ 634.893096][T26019] ? __context_tracking_exit+0x7a/0xd0 [ 634.898641][T26019] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 634.905711][T26019] ? lockdep_hardirqs_on+0x8d/0x130 [ 634.911322][T26019] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 634.917134][T26019] do_syscall_64+0x2d/0x70 21:28:49 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x10, 0x0, 0x0, 0x0) [ 634.921711][T26019] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 634.927937][T26019] RIP: 0033:0x466459 [ 634.933216][T26019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.955612][T26019] RSP: 002b:00007f52cc33f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 634.965773][T26019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 21:28:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0xf, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:49 executing program 2 (fault-call:3 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) [ 634.974874][T26019] RDX: 0000000000000000 RSI: 0000000000004ab0 RDI: 0000000000000003 [ 634.983451][T26019] RBP: 00007f52cc33f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.991543][T26019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.999660][T26019] R13: 00007fff17d4e14f R14: 00007f52cc33f300 R15: 0000000000022000 21:28:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x10, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) 21:28:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 635.185804][T26049] FAULT_INJECTION: forcing a failure. [ 635.185804][T26049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.243893][T26049] CPU: 0 PID: 26049 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 635.253151][T26049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.263248][T26049] Call Trace: [ 635.266629][T26049] dump_stack+0x176/0x24e [ 635.270991][T26049] should_fail+0x384/0x4b0 [ 635.275432][T26049] _copy_from_user+0x2d/0x170 [ 635.280131][T26049] __do_sys_bpf+0x137/0x11160 [ 635.284989][T26049] ? __context_tracking_exit+0x7a/0xd0 [ 635.290491][T26049] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 635.296495][T26049] ? lockdep_hardirqs_on+0x8d/0x130 [ 635.301853][T26049] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 635.307856][T26049] do_syscall_64+0x2d/0x70 [ 635.312301][T26049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.318220][T26049] RIP: 0033:0x466459 [ 635.322144][T26049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:28:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, 0x0, 0x0, 0x100, &(0x7f0000001640)={0x0, 0x989680}) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:28:49 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x417f, &(0x7f00000001c0), &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4a30, 0x12, 0x0, 0x0, 0x0) 21:28:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x11, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/161, 0x28, 0xa1, 0x8}, 0x20) [ 635.341945][T26049] RSP: 002b:00007f80c3401188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.350498][T26049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 635.359109][T26049] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 635.367220][T26049] RBP: 00007f80c34011d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.376432][T26049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.384427][T26049] R13: 00007ffcefe4e74f R14: 00007f80c3401300 R15: 0000000000022000 21:28:49 executing program 2 (fault-call:3 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x29, 0xa1, 0x8}, 0x20) 21:28:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_io_uring_setup(0x1b56, &(0x7f0000000080), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001640)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_io_uring_setup(0x4fa0, &(0x7f0000001740), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000d7b000/0x4000)=nil, &(0x7f00000017c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 635.594190][T26070] FAULT_INJECTION: forcing a failure. [ 635.594190][T26070] name failslab, interval 1, probability 0, space 0, times 0 [ 635.636905][T26070] CPU: 1 PID: 26070 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 635.645992][T26070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.656189][T26070] Call Trace: [ 635.659498][T26070] dump_stack+0x176/0x24e [ 635.663860][T26070] should_fail+0x384/0x4b0 [ 635.675084][T26070] ? btf_new_fd+0x10e/0x2790 [ 635.681113][T26070] should_failslab+0x5/0x20 [ 635.688098][T26070] kmem_cache_alloc_trace+0x6a/0x350 [ 635.693425][T26070] btf_new_fd+0x10e/0x2790 [ 635.697899][T26070] ? cap_capable+0x27e/0x2d0 [ 635.702512][T26070] ? safesetid_security_capable+0xad/0x1d0 [ 635.708341][T26070] ? bpf_lsm_capable+0x5/0x10 [ 635.713043][T26070] ? security_capable+0xb1/0xd0 [ 635.717921][T26070] __do_sys_bpf+0x1824/0x11160 [ 635.722747][T26070] ? __context_tracking_exit+0x7a/0xd0 [ 635.728244][T26070] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 635.734248][T26070] ? lockdep_hardirqs_on+0x8d/0x130 [ 635.739470][T26070] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 635.745521][T26070] do_syscall_64+0x2d/0x70 [ 635.749956][T26070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.755929][T26070] RIP: 0033:0x466459 [ 635.759866][T26070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.779700][T26070] RSP: 002b:00007f80c3401188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.788119][T26070] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 635.796111][T26070] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 635.804361][T26070] RBP: 00007f80c34011d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.812342][T26070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.820404][T26070] R13: 00007ffcefe4e74f R14: 00007f80c3401300 R15: 0000000000022000 [ 685.592395][ T3222] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.598756][ T3222] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.032971][ T3222] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.039757][ T3222] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.352257][ T1621] INFO: task syz-executor.4:26019 blocked for more than 143 seconds. [ 787.360781][ T1621] Not tainted 5.12.0-rc6-syzkaller #0 [ 787.369912][ T1621] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 787.387881][ T1621] task:syz-executor.4 state:D stack:28608 pid:26019 ppid: 8400 flags:0x00004004 [ 787.399015][ T1621] Call Trace: [ 787.408913][ T1621] __schedule+0x999/0xe70 [ 787.414788][ T1621] schedule+0x14b/0x200 [ 787.419021][ T1621] schedule_timeout+0x43/0x250 [ 787.434527][ T1621] ? _raw_spin_unlock_irq+0x1f/0x40 [ 787.439901][ T1621] ? lockdep_hardirqs_on+0x8d/0x130 [ 787.454279][ T1621] do_wait_for_common+0x266/0x3a0 [ 787.459394][ T1621] ? console_conditional_schedule+0x40/0x40 [ 787.470595][ T1621] wait_for_completion+0x48/0x60 [ 787.478993][ T1621] io_wq_destroy_manager+0x50/0x110 [ 787.489470][ T1621] io_wq_put_and_exit+0x24/0x30 [ 787.498354][ T1621] __io_uring_files_cancel+0xd52/0xda0 [ 787.504386][ T1621] ? _raw_spin_unlock_irqrestore+0x3f/0xc0 [ 787.510580][ T1621] ? __validate_process_creds+0x23f/0x3f0 [ 787.517150][ T1621] do_exit+0x253/0x2290 [ 787.521382][ T1621] ? get_signal+0x16ef/0x2030 [ 787.526989][ T1621] ? rcu_read_lock_sched_held+0x41/0xb0 [ 787.533122][ T1621] do_group_exit+0x168/0x2d0 [ 787.537844][ T1621] ? lockdep_hardirqs_on+0x8d/0x130 [ 787.543459][ T1621] get_signal+0x186f/0x2030 [ 787.548265][ T1621] arch_do_signal_or_restart+0x41/0x620 [ 787.554156][ T1621] ? exit_to_user_mode_prepare+0x49/0x1e0 [ 787.559921][ T1621] exit_to_user_mode_prepare+0xac/0x1e0 [ 787.565611][ T1621] ? trace_irq_disable_rcuidle+0x11/0x170 [ 787.571354][ T1621] syscall_exit_to_user_mode+0x26/0x70 [ 787.578023][ T1621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.585224][ T1621] RIP: 0033:0x466459 [ 787.589246][ T1621] RSP: 002b:00007f52cc33f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 787.598404][ T1621] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000466459 [ 787.607525][ T1621] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 787.618313][ T1621] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 787.627531][ T1621] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 787.635833][ T1621] R13: 00007fff17d4e14f R14: 00007f52cc33f300 R15: 0000000000022000 [ 787.644414][ T1621] INFO: task iou-mgr-26019:26023 blocked for more than 143 seconds. [ 787.653133][ T1621] Not tainted 5.12.0-rc6-syzkaller #0 [ 787.659051][ T1621] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 787.667990][ T1621] task:iou-mgr-26019 state:D stack:29696 pid:26023 ppid: 8400 flags:0x00004000 [ 787.677968][ T1621] Call Trace: [ 787.682939][ T1621] __schedule+0x999/0xe70 [ 787.687327][ T1621] schedule+0x14b/0x200 [ 787.692294][ T1621] schedule_timeout+0x43/0x250 [ 787.697092][ T1621] ? _raw_spin_unlock_irq+0x1f/0x40 [ 787.704158][ T1621] ? lockdep_hardirqs_on+0x8d/0x130 [ 787.709492][ T1621] do_wait_for_common+0x266/0x3a0 [ 787.715257][ T1621] ? console_conditional_schedule+0x40/0x40 [ 787.721201][ T1621] wait_for_completion+0x48/0x60 [ 787.729621][ T1621] io_wq_manager+0x686/0x8e0 [ 787.735313][ T1621] ? lockdep_hardirqs_on+0x8d/0x130 [ 787.740561][ T1621] ? io_wq_worker_cancel+0x230/0x230 [ 787.745944][ T1621] ret_from_fork+0x1f/0x30 [ 787.750458][ T1621] [ 787.750458][ T1621] Showing all locks held in the system: [ 787.758620][ T1621] 1 lock held by khungtaskd/1621: [ 787.763835][ T1621] #0: ffffffff8c710280 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 787.773498][ T1621] [ 787.775845][ T1621] ============================================= [ 787.775845][ T1621] [ 787.784693][ T1621] NMI backtrace for cpu 1 [ 787.789223][ T1621] CPU: 1 PID: 1621 Comm: khungtaskd Not tainted 5.12.0-rc6-syzkaller #0 [ 787.797554][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.807630][ T1621] Call Trace: [ 787.810921][ T1621] dump_stack+0x176/0x24e [ 787.815272][ T1621] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 787.821678][ T1621] nmi_cpu_backtrace+0x16c/0x190 [ 787.826724][ T1621] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 787.832798][ T1621] nmi_trigger_cpumask_backtrace+0x191/0x2f0 [ 787.838813][ T1621] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 787.844913][ T1621] watchdog+0xcfb/0xd40 [ 787.849097][ T1621] ? hungtask_pm_notify+0x50/0x50 [ 787.854134][ T1621] kthread+0x39a/0x3c0 [ 787.858238][ T1621] ? hungtask_pm_notify+0x50/0x50 [ 787.863357][ T1621] ? kthread_blkcg+0xd0/0xd0 [ 787.867966][ T1621] ret_from_fork+0x1f/0x30 [ 787.873281][ T1621] Sending NMI from CPU 1 to CPUs 0: [ 787.878882][ C0] NMI backtrace for cpu 0 [ 787.878891][ C0] CPU: 0 PID: 4819 Comm: systemd-journal Not tainted 5.12.0-rc6-syzkaller #0 [ 787.878898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.878904][ C0] RIP: 0010:kasan_get_free_meta+0x7/0x20 [ 787.878910][ C0] Code: 00 00 90 48 63 8f bc 00 00 00 48 8d 04 0e 48 85 c9 48 0f 44 c1 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 63 8f c0 00 00 00 <48> 8d 14 0e 31 c0 48 81 f9 ff ff ff 7f 48 0f 45 c2 c3 0f 1f 80 00 [ 787.878919][ C0] RSP: 0018:ffffc900015afca0 EFLAGS: 00000a06 [ 787.878929][ C0] RAX: dffffc0000000000 RBX: ffff8880134a3300 RCX: 0000000000000000 [ 787.878935][ C0] RDX: 0000000000000800 RSI: ffff8880134a3300 RDI: ffff8880109bd280 [ 787.878940][ C0] RBP: ffff8880134a3300 R08: 0000000000000003 R09: ffffffff89600dd0 [ 787.878946][ C0] R10: ffffffff89800000 R11: ffffffff89800714 R12: 0000000000000292 [ 787.878951][ C0] R13: ffff8880109bd280 R14: ffff8880109bd280 R15: ffffc900015afd38 [ 787.878957][ C0] FS: 00007f3a507f68c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 787.878963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.878968][ C0] CR2: 00007f3a4ddb8000 CR3: 0000000011ab5000 CR4: 00000000001506f0 [ 787.878973][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 787.878978][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 787.878983][ C0] Call Trace: [ 787.878987][ C0] kasan_quarantine_put+0x12/0x210 [ 787.878991][ C0] slab_free_freelist_hook+0x171/0x270 [ 787.878995][ C0] ? filename_lookup+0x42f/0x5e0 [ 787.878999][ C0] kmem_cache_free+0x85/0x170 [ 787.879003][ C0] filename_lookup+0x42f/0x5e0 [ 787.879006][ C0] ? getname_flags+0x1fe/0x640 [ 787.879011][ C0] do_faccessat+0x39d/0x890 [ 787.879015][ C0] do_syscall_64+0x2d/0x70 [ 787.879018][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.879023][ C0] RIP: 0033:0x7f3a4fab19c7 [ 787.879028][ C0] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 787.879037][ C0] RSP: 002b:00007ffe2c0d3838 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 787.879047][ C0] RAX: ffffffffffffffda RBX: 00007ffe2c0d6860 RCX: 00007f3a4fab19c7 [ 787.879052][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005584468999a3 [ 787.879057][ C0] RBP: 00007ffe2c0d3980 R08: 000055844688f3e5 R09: 0000000000000018 [ 787.879063][ C0] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 787.879068][ C0] R13: 0000000000000000 R14: 0000558447c8c8a0 R15: 00007ffe2c0d3e70 [ 787.883974][ T1621] Kernel panic - not syncing: hung_task: blocked tasks [ 788.184559][ T1621] CPU: 1 PID: 1621 Comm: khungtaskd Not tainted 5.12.0-rc6-syzkaller #0 [ 788.192989][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.203386][ T1621] Call Trace: [ 788.206688][ T1621] dump_stack+0x176/0x24e [ 788.223477][ T1621] panic+0x291/0x800 [ 788.227405][ T1621] ? nmi_trigger_cpumask_backtrace+0x236/0x2f0 [ 788.233666][ T1621] ? nmi_trigger_cpumask_backtrace+0x29b/0x2f0 [ 788.240379][ T1621] ? nmi_trigger_cpumask_backtrace+0x236/0x2f0 [ 788.247434][ T1621] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2f0 [ 788.253703][ T1621] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 788.259818][ T1621] watchdog+0xd3b/0xd40 [ 788.264004][ T1621] ? hungtask_pm_notify+0x50/0x50 [ 788.269308][ T1621] kthread+0x39a/0x3c0 [ 788.273393][ T1621] ? hungtask_pm_notify+0x50/0x50 [ 788.278430][ T1621] ? kthread_blkcg+0xd0/0xd0 [ 788.283426][ T1621] ret_from_fork+0x1f/0x30 [ 788.288683][ T1621] Kernel Offset: disabled [ 788.293473][ T1621] Rebooting in 86400 seconds..