0', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000a4000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000004600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010b000000000000000017000000"], 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x36) [ 196.587155][ T6702] __nla_validate_parse: 4 callbacks suppressed [ 196.587174][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:52:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xf6a5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80000}) 12:52:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x15, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 12:52:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000a4000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000004600)=ANY=[@ANYBLOB="005b6367ccc6763312bbaeda81ae9836e422122222f975a701daa12430744f8bb288e74fc3b44f318cff551f991f70bbbe21c4ebfa0cf565a0476305474dc4cda1cbeb79abd18b883ac587c8cc5981ab015b25a5e02cdcccae5f2246e8b460ffce569d2c3442a7ed94eeffb082ad2a294826634d526985f7c94d435295b5613c8550b9ea3e99f486251f87871c32e4f139186caf8ebf012f242be00f51208cc91730a58730c062ef49ecbccc2e5740eb3f689042f670762b85105b1451ab23cbb866944dd067dc1b55f7fc075b03eed448877bcfd7e5ef051f65432f8dc93209418b06a6c5ab05507948b704c7016148fc8fcc95297e20e9e8cad1a0e79ebf1c0170859f392d7ee408c58fba7d36158a1d8b5acacf6ff8dd1508759f7894ff97b73fd929c3fcd1d9b2aa835cf078f539809118cfa954952104a95e9a5312e73e68357d7afafc79393fe9a9d913904f46827bed357fe0289722ec27b7127e3c06edd24c3fd10f40643a53641d08b6abf1662684755f9e8d725cec314715c7010788ca", @ANYRES16=r2, @ANYBLOB="010b000000000000000017000000"], 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x36) [ 196.682449][ T6699] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 196.695472][ T6699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 196.760877][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xf6a5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80000}) 12:53:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x15, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) [ 196.890027][ T5571] usb 5-1: new high-speed USB device number 6 using dummy_hcd 12:53:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xf6a5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80000}) [ 196.995929][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.216792][ T5571] usb 5-1: Using ep0 maxpacket: 8 [ 197.351722][ T5571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.362792][ T5571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 197.374576][ T5571] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.384869][ T5571] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 12:53:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) ppoll(&(0x7f0000000440)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x10034) 12:53:00 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x15, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) [ 197.395315][ T5571] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.404820][ T5571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.415719][ T5571] usb 5-1: config 0 descriptor?? [ 197.478294][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.671730][ T5571] usb 5-1: GET_CAPABILITIES returned 0 [ 197.677254][ T5571] usbtmc 5-1:0.0: can't read capabilities [ 197.881315][ T5571] usb 5-1: USB disconnect, device number 6 12:53:01 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x5c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40015b19, 0x0) 12:53:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100fe60f4246d670a03078a150f75080039000500", 0x27) 12:53:01 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:01 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:01 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x2, 0x0, 0x0, 0x0, 0x4}]}) 12:53:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000a4000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00'}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000004600)=ANY=[@ANYBLOB="005b6367ccc6763312bbaeda81ae9836e422122222f975a701daa12430744f8bb288e74fc3b44f318cff551f991f70bbbe21c4ebfa0cf565a0476305474dc4cda1cbeb79abd18b883ac587c8cc5981ab015b25a5e02cdcccae5f2246e8b460ffce569d2c3442a7ed94eeffb082ad2a294826634d526985f7c94d435295b5613c8550b9ea3e99f486251f87871c32e4f139186caf8ebf012f242be00f51208cc91730a58730c062ef49ecbccc2e5740eb3f689042f670762b85105b1451ab23cbb866944dd067dc1b55f7fc075b03eed448877bcfd7e5ef051f65432f8dc93209418b06a6c5ab05507948b704c7016148fc8fcc95297e20e9e8cad1a0e79ebf1c0170859f392d7ee408c58fba7d36158a1d8b5acacf6ff8dd1508759f7894ff97b73fd929c3fcd1d9b2aa835cf078f539809118cfa954952104a95e9a5312e73e68357d7afafc79393fe9a9d913904f46827bed357fe0289722ec27b7127e3c06edd24c3fd10f40643a53641d08b6abf1662684755f9e8d725cec314715c7010788ca", @ANYRES16=r2, @ANYBLOB="010b000000000000000017000000"], 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x36) 12:53:01 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:01 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100fe60f4246d670a03078a150f75080039000500", 0x27) 12:53:01 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:01 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/kexec_crash_size', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000000)=""/112, 0x70) 12:53:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100fe60f4246d670a03078a150f75080039000500", 0x27) [ 198.731705][ T3681] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 198.981710][ T3681] usb 5-1: Using ep0 maxpacket: 8 [ 199.101930][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.117173][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 199.128578][ T3681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.143107][ T3681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.155461][ T3681] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.164846][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.177763][ T3681] usb 5-1: config 0 descriptor?? [ 199.441673][ T3681] usb 5-1: GET_CAPABILITIES returned 0 [ 199.447337][ T3681] usbtmc 5-1:0.0: can't read capabilities [ 199.664299][ T3681] usb 5-1: USB disconnect, device number 7 12:53:03 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x5c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40015b19, 0x0) 12:53:03 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) read$FUSE(r0, 0x0, 0x2) 12:53:03 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060011000084ffcf8a63ed0000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:53:03 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100fe60f4246d670a03078a150f75080039000500", 0x27) 12:53:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1170, 0xd0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'bond_slave_1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @common=@mh={{0x28}, {"66d8"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) [ 200.203973][ T6776] Cannot find del_set index 0 as target [ 200.211136][ T6778] validate_nla: 4 callbacks suppressed [ 200.211154][ T6778] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:53:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1170, 0xd0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'bond_slave_1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @common=@mh={{0x28}, {"66d8"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 12:53:03 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073}]}) [ 200.310286][ T6788] Cannot find del_set index 0 as target [ 200.331348][ T6784] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 12:53:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1170, 0xd0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'bond_slave_1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @common=@mh={{0x28}, {"66d8"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 12:53:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@delqdisc={0x28, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x4, 0xb}]}, 0x28}}, 0x0) [ 200.377156][ T6783] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.390303][ T6783] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 200.402110][ T6783] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode 12:53:03 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76853c", 0x8, 0x0, 0x0, @remote, @dev, {[@dstopts]}}}}}, 0x0) [ 200.465518][ T6794] Cannot find del_set index 0 as target [ 200.477922][ T6796] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 12:53:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1170, 0xd0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'bond_slave_1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @common=@mh={{0x28}, {"66d8"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) [ 200.521809][ T3681] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.604815][ T6800] Cannot find del_set index 0 as target [ 200.761694][ T3681] usb 5-1: Using ep0 maxpacket: 8 [ 200.881785][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.897127][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.908984][ T3681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.920120][ T3681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.930252][ T3681] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.939753][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.950296][ T3681] usb 5-1: config 0 descriptor?? [ 201.211733][ T3681] usb 5-1: GET_CAPABILITIES returned 0 [ 201.217474][ T3681] usbtmc 5-1:0.0: can't read capabilities [ 201.427931][ T5567] usb 5-1: USB disconnect, device number 8 12:53:05 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x5c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40015b19, 0x0) 12:53:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@delqdisc={0x28, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x4, 0xb}]}, 0x28}}, 0x0) 12:53:05 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060011000084ffcf8a63ed0000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:53:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r2, 0x4, 0x33982ea265ca740) 12:53:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000000)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_cred(r2, 0x1, 0x2f, &(0x7f0000000500)={0xffffffffffffffff, r1, 0xee01}, 0xc) 12:53:05 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r2, 0x4, 0x33982ea265ca740) 12:53:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000000)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_cred(r2, 0x1, 0x2f, &(0x7f0000000500)={0xffffffffffffffff, r1, 0xee01}, 0xc) [ 201.975685][ T6810] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 202.009406][ T6807] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:53:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@delqdisc={0x28, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x4, 0xb}]}, 0x28}}, 0x0) 12:53:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000000)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_cred(r2, 0x1, 0x2f, &(0x7f0000000500)={0xffffffffffffffff, r1, 0xee01}, 0xc) 12:53:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r2, 0x4, 0x33982ea265ca740) 12:53:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@delqdisc={0x28, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x4, 0xb}]}, 0x28}}, 0x0) [ 202.137937][ T6821] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 202.178120][ T6819] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.212710][ T6819] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 202.223312][ T6819] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 202.281744][ T1134] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.298420][ T6827] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 202.541778][ T1134] usb 5-1: Using ep0 maxpacket: 8 [ 202.661846][ T1134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.672891][ T1134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 202.684421][ T1134] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.694714][ T1134] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.704865][ T1134] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.714151][ T1134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.724190][ T1134] usb 5-1: config 0 descriptor?? [ 202.981863][ T1134] usb 5-1: GET_CAPABILITIES returned 0 [ 202.987429][ T1134] usbtmc 5-1:0.0: can't read capabilities [ 203.198062][ T5571] usb 5-1: USB disconnect, device number 9 12:53:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setstatus(r2, 0x4, 0x33982ea265ca740) 12:53:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000000)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_cred(r2, 0x1, 0x2f, &(0x7f0000000500)={0xffffffffffffffff, r1, 0xee01}, 0xc) 12:53:06 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:06 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060011000084ffcf8a63ed0000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:53:06 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r0, 0x32f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:53:06 executing program 5: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendmmsg(r0, &(0x7f000000d9c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="d7", 0x1}], 0x1}}], 0x1, 0x2600c054) 12:53:07 executing program 3: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) [ 203.743029][ T6832] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:53:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r0, 0x32f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 203.834641][ T6841] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.883752][ T6841] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.899521][ T6841] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode 12:53:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r0, 0x32f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:53:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106-gcm-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) 12:53:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r0, 0x32f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:53:07 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060011000084ffcf8a63ed0000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:53:07 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 204.223056][ T6861] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 204.314806][ T6865] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.314835][ T6865] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 204.314853][ T6865] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode 12:53:07 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:07 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 12:53:07 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)='M', 0x1}], 0x1) 12:53:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106-gcm-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) 12:53:07 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:08 executing program 3: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) 12:53:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106-gcm-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) 12:53:08 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)='M', 0x1}], 0x1) 12:53:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106-gcm-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) 12:53:08 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)='M', 0x1}], 0x1) 12:53:08 executing program 5: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) 12:53:08 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)='M', 0x1}], 0x1) 12:53:09 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40010500, 0x0, 0xffffffffffffff49) 12:53:09 executing program 2: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1e, 0x0, 0x0, 0x0) 12:53:09 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 12:53:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"06000000dd245c8401000040c9c8dc1964325fa96fa42b76800400002bec0ba41f07000000000000850400003b00041f01ffff84083c5ca2d2672b01ee377abaece6b88378e3d632580001c0361d264ffa8b46485f02baee010100c04252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1d0500000000000000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea995e5f0c6c379f9cc58bfcf8f10e28ead480900000000000000cd9bbb5a6baa41d614f6c824b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daecc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051f214c38c3d07ce38dabb7cd103fe4d0c9c963cd717a77f8df8df2239b1f58e068af6afbbc19db161c6df1e7c9c7d7c08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c5693102009a64fc7d9684364673dcfa9235dc5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185a0228b737c171f9c909374286070000006f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb78397979859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17ff030c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b8da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfab34b2541d3c114b7bba1c21a845c9cf4aba16f70f558b2246ad95ccf7d3f80cc0ab26f09736ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f98d5703dc78b1ca9d74ea6a9ae12ab367c0ada119b5132145fa45250300c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a48454297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e9557222ff47c5b6f010072975af74e97a5a811018000006f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf23c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300000000000000000000000000000000000000000000000000cf462230000000000000000000000000000000000000000000000000000000fe1997742a00fb4500"}) 12:53:09 executing program 3: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) 12:53:09 executing program 2: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1e, 0x0, 0x0, 0x0) 12:53:09 executing program 2: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1e, 0x0, 0x0, 0x0) 12:53:09 executing program 2: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1e, 0x0, 0x0, 0x0) 12:53:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'lo\x00'}, 0x18) 12:53:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"}) 12:53:09 executing program 5: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) 12:53:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"}) [ 206.064283][ T6925] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 12:53:10 executing program 3: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) 12:53:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"}) 12:53:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xd83, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 12:53:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"06000000dd245c8401000040c9c8dc1964325fa96fa42b76800400002bec0ba41f07000000000000850400003b00041f01ffff84083c5ca2d2672b01ee377abaece6b88378e3d632580001c0361d264ffa8b46485f02baee010100c04252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1d0500000000000000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea995e5f0c6c379f9cc58bfcf8f10e28ead480900000000000000cd9bbb5a6baa41d614f6c824b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daecc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051f214c38c3d07ce38dabb7cd103fe4d0c9c963cd717a77f8df8df2239b1f58e068af6afbbc19db161c6df1e7c9c7d7c08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c5693102009a64fc7d9684364673dcfa9235dc5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185a0228b737c171f9c909374286070000006f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb78397979859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17ff030c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b8da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfab34b2541d3c114b7bba1c21a845c9cf4aba16f70f558b2246ad95ccf7d3f80cc0ab26f09736ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f98d5703dc78b1ca9d74ea6a9ae12ab367c0ada119b5132145fa45250300c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a48454297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e9557222ff47c5b6f010072975af74e97a5a811018000006f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf23c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d819164300000000000000000000000000000000000000000000000000cf462230000000000000000000000000000000000000000000000000000000fe1997742a00fb4500"}) 12:53:10 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 12:53:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xd83, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 12:53:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xd83, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 12:53:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"}) 12:53:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"}) 12:53:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xd83, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 12:53:10 executing program 5: r0 = socket(0x18, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20000600}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r3, r0) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0) 12:53:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/49, 0x31}], 0x1) 12:53:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203050902620002010080000904000001020d00000b240600016af369037f5b05240015000d240f0100000000000000040006241a0000280905810300121020000904010000020d00000904010102020d0000090582020002007f00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x87, 0x2}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:53:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/49, 0x31}], 0x1) 12:53:10 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047455, &(0x7f00000000c0)) 12:53:10 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, 0x0) 12:53:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/49, 0x31}], 0x1) 12:53:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, 0x0) 12:53:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/49, 0x31}], 0x1) 12:53:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, 0x0) 12:53:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) [ 208.071867][ T3681] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 208.911803][ T3681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.920902][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.929868][ T3681] usb 3-1: Product: syz [ 208.934366][ T3681] usb 3-1: Manufacturer: syz [ 208.938983][ T3681] usb 3-1: SerialNumber: syz [ 210.101911][ T3681] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 210.108394][ T3681] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 210.116687][ T3681] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 210.321828][ T3681] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 210.764768][ T3681] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 210.968857][ T5567] usb 3-1: USB disconnect, device number 2 [ 210.980077][ T5567] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) 12:53:14 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, 0x0) 12:53:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:14 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:14 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047455, &(0x7f00000000c0)) 12:53:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203050902620002010080000904000001020d00000b240600016af369037f5b05240015000d240f0100000000000000040006241a0000280905810300121020000904010000020d00000904010102020d0000090582020002007f00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x87, 0x2}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:53:14 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 12:53:14 executing program 4: ioprio_get$uid(0x3, 0x0) 12:53:14 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:14 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:14 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 12:53:14 executing program 4: ioprio_get$uid(0x3, 0x0) 12:53:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002140)={0x4, 0x0, &(0x7f0000002080)=[@register_looper], 0x50, 0x0, &(0x7f00000020c0)="8d018461528c4cef7c0c72b72ade4d53c223d162dc0c22a9d758024d72fd066c9335525c3b6af8fc26a78c2082c1134d2de27ad6e2bbcf0fbc6bf5e8e9ddceba94c08eb3db27259ba2a486f228f627fc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12:53:15 executing program 4: ioprio_get$uid(0x3, 0x0) 12:53:15 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x0, 0x0}]}) [ 211.862449][ T5572] usb 3-1: new high-speed USB device number 3 using dummy_hcd 12:53:15 executing program 5: clock_adjtime(0xa, &(0x7f00000005c0)) [ 212.143213][ T3676] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.382743][ T3676] usb 1-1: Using ep0 maxpacket: 16 [ 212.542669][ T3676] usb 1-1: unable to get BOS descriptor or descriptor too short 12:53:15 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047455, &(0x7f00000000c0)) [ 212.631863][ T3676] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 212.640748][ T3676] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 212.651458][ T3676] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.691802][ T3676] usb 1-1: language id specifier not provided by device, defaulting to English [ 212.861710][ T5572] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.870991][ T5572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.879240][ T5572] usb 3-1: Product: syz [ 212.883639][ T5572] usb 3-1: Manufacturer: syz [ 212.888430][ T5572] usb 3-1: SerialNumber: syz [ 213.019087][ T3676] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.028559][ T3676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.045416][ T3676] usb 1-1: Product: syz [ 213.049634][ T3676] usb 1-1: SerialNumber: syz [ 213.371771][ T3676] usb 1-1: 0:2 : does not exist [ 213.405256][ T3676] usb 1-1: USB disconnect, device number 6 [ 214.041830][ T5572] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 214.048312][ T5572] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 214.055806][ T5572] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 214.251741][ T5572] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 214.695753][ T5572] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 214.942069][ T5715] usb 3-1: USB disconnect, device number 3 [ 214.948639][ T5715] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) 12:53:18 executing program 5: clock_adjtime(0xa, &(0x7f00000005c0)) 12:53:18 executing program 4: ioprio_get$uid(0x3, 0x0) 12:53:18 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 12:53:18 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047455, &(0x7f00000000c0)) 12:53:18 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 12:53:18 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203050902620002010080000904000001020d00000b240600016af369037f5b05240015000d240f0100000000000000040006241a0000280905810300121020000904010000020d00000904010102020d0000090582020002007f00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x87, 0x2}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:53:18 executing program 5: clock_adjtime(0xa, &(0x7f00000005c0)) 12:53:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:18 executing program 5: clock_adjtime(0xa, &(0x7f00000005c0)) [ 216.010004][ T5572] usb 3-1: new high-speed USB device number 4 using dummy_hcd 12:53:19 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040), 0x4) 12:53:19 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040), 0x4) 12:53:19 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040), 0x4) [ 217.039261][ T5572] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.051960][ T5572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.079283][ T5572] usb 3-1: Product: syz [ 217.094409][ T5572] usb 3-1: Manufacturer: syz [ 217.110454][ T5572] usb 3-1: SerialNumber: syz [ 218.291802][ T5572] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 218.298290][ T5572] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 218.311819][ T5572] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 218.524495][ T5572] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 218.965167][ T5572] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 219.187449][ T5571] usb 3-1: USB disconnect, device number 4 [ 219.204684][ T5571] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) 12:53:22 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 12:53:22 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040), 0x4) 12:53:22 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 12:53:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:23 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203050902620002010080000904000001020d00000b240600016af369037f5b05240015000d240f0100000000000000040006241a0000280905810300121020000904010000020d00000904010102020d0000090582020002007f00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x87, 0x2}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:53:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) [ 220.240859][ T3676] usb 3-1: new high-speed USB device number 5 using dummy_hcd 12:53:24 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 12:53:24 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000300)=0x6e, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x800}]}, 0x34}}, 0x8004865) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) [ 221.142100][ T3676] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.161746][ T3676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.188581][ T3676] usb 3-1: Product: syz [ 221.203274][ T3676] usb 3-1: Manufacturer: syz [ 221.219185][ T3676] usb 3-1: SerialNumber: syz 12:53:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) [ 222.411822][ T3676] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 222.419532][ T3676] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 222.471313][ T3676] cdc_ncm 3-1:1.0: setting rx_max = 2048 12:53:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) [ 222.622076][ T3676] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 223.068071][ T3676] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 223.369091][ T3676] usb 3-1: USB disconnect, device number 5 [ 223.378382][ T3676] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) 12:53:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'decodes', ' ', 'io'}, 0xb) 12:53:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'decodes', ' ', 'io'}, 0xb) [ 227.197328][ T7365] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:53:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'decodes', ' ', 'io'}, 0xb) [ 227.282890][ T7369] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:53:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'decodes', ' ', 'io'}, 0xb) [ 227.365666][ T7373] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 227.464080][ T7377] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem 12:53:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x0, {0x2, 0x0, @dev}}) 12:53:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x0, {0x2, 0x0, @dev}}) 12:53:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x0, {0x2, 0x0, @dev}}) 12:53:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x0, {0x2, 0x0, @dev}}) 12:53:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:53:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:32 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 12:53:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:32 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000006c0)="eae5055b7e0335d707", 0x9) 12:53:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:53:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:53:32 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 12:53:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) [ 229.191280][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:53:32 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 12:53:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) 12:53:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) read(r2, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x0, 0xf9f, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x105}, 0x1c) 12:53:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) [ 230.064165][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:33 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 12:53:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) 12:53:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) [ 230.390712][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) [ 230.466253][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) 12:53:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:33 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 230.606278][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.732080][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.941825][ T5572] usb 1-1: new high-speed USB device number 7 using dummy_hcd 12:53:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x0, 0x7, 0x20}, 0x20) 12:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/239, 0x10}], 0x1}, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) 12:53:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r3, 0x0, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup(0xffffffffffffffff) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000c80)={0x0, &(0x7f0000000140)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:53:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x0, 0x7, 0x20}, 0x20) [ 231.130695][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) 12:53:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x0, 0x7, 0x20}, 0x20) [ 231.177833][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.191634][ T5572] usb 1-1: Using ep0 maxpacket: 32 12:53:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x0, 0x7, 0x20}, 0x20) 12:53:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) [ 231.321951][ T5572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.364659][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.369235][ T5572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.394579][ T5572] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.405290][ T5572] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 231.415258][ T5572] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.425417][ T5572] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 231.591721][ T5572] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.600885][ T5572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.609098][ T5572] usb 1-1: Product: syz [ 231.613351][ T5572] usb 1-1: Manufacturer: syz [ 231.617986][ T5572] usb 1-1: SerialNumber: syz [ 231.871721][ T5571] Bluetooth: hci0: command 0x0406 tx timeout [ 231.881837][ T1134] Bluetooth: hci4: command 0x0406 tx timeout [ 231.887907][ T1134] Bluetooth: hci1: command 0x0406 tx timeout [ 231.894016][ T1134] Bluetooth: hci3: command 0x0406 tx timeout [ 231.900025][ T1134] Bluetooth: hci5: command 0x0406 tx timeout [ 231.902006][ T5572] cdc_ncm 1-1:1.0: bind() failure [ 231.914772][ T5572] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 231.921933][ T5572] cdc_ncm 1-1:1.1: bind() failure [ 231.929463][ T5572] usb 1-1: USB disconnect, device number 7 12:53:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x60, 0x0, r5}}, 0x24}}, 0x0) 12:53:35 executing program 3: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f00000001c0)='G', 0x1}]) 12:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) 12:53:35 executing program 1: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x401e, 0x4002, &(0x7f0000000000)=0x5, 0x236, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) 12:53:35 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0/file0\x00', &(0x7f0000000540)={0x183941, 0x0, 0x8}, 0x18) 12:53:35 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0/file0\x00', &(0x7f0000000540)={0x183941, 0x0, 0x8}, 0x18) 12:53:35 executing program 1: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x401e, 0x4002, &(0x7f0000000000)=0x5, 0x236, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) [ 232.404303][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:53:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) 12:53:35 executing program 1: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x401e, 0x4002, &(0x7f0000000000)=0x5, 0x236, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) 12:53:35 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0/file0\x00', &(0x7f0000000540)={0x183941, 0x0, 0x8}, 0x18) 12:53:35 executing program 1: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x401e, 0x4002, &(0x7f0000000000)=0x5, 0x236, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) 12:53:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c4442ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) [ 232.881258][ T7531] Cannot find add_set index 0 as target 12:53:36 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:36 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0/file0\x00', &(0x7f0000000540)={0x183941, 0x0, 0x8}, 0x18) 12:53:36 executing program 2: r0 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 12:53:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') exit(0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1, 0x4, 0x0) 12:53:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c4442ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) [ 233.783454][ T7540] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 12:53:37 executing program 2: r0 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 12:53:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 12:53:37 executing program 2: r0 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) [ 233.959421][ T7549] Cannot find add_set index 0 as target [ 234.031107][ T7552] bridge: RTM_NEWNEIGH with invalid ether address 12:53:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 12:53:37 executing program 2: r0 = socket(0x2, 0x3, 0x65) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 12:53:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0xfffffffffffffffd, 0x106}}, 0x20) [ 234.198478][ T7556] bridge: RTM_NEWNEIGH with invalid ether address 12:53:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 12:53:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0xfffffffffffffffd, 0x106}}, 0x20) [ 234.436021][ T7564] bridge: RTM_NEWNEIGH with invalid ether address 12:53:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') exit(0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1, 0x4, 0x0) 12:53:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c4442ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 12:53:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0xfffffffffffffffd, 0x106}}, 0x20) 12:53:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 12:53:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x7f, 0x3}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2bc7]}}], 0xffc8) dup(0xffffffffffffffff) 12:53:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0xfffffffffffffffd, 0x106}}, 0x20) 12:53:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) [ 234.801043][ T7577] bridge: RTM_NEWNEIGH with invalid ether address 12:53:38 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4008886) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000440)) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f00000001c0)={0x20071026}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0xfffffffe, 0x8718, 0x9}) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000001840)=""/176, 0xb0}], 0x2) io_submit(r1, 0x7, &(0x7f0000001ec0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0xfff}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="2dda3efd54ea6affca7c4eab62a66942659a86d1e21a2986f2f6f9a0c6563c5eb13d0d369e1c721060c8b339c7be0ee2400d2d7a2ec88a7b97179d2b3beaef5b3c1185dbeb1f595991678b10f57485e35f8603b5758a3ce64ca5f0431a", 0x5d, 0x200}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000001700)="fdf0a23e12850b01232c2b70ac7c3356390e1fdd594703c07aeaaf0e699d7efb86ea041a16768744110969c05d460ff522a540e30258c88398cc46586212c29e5034eaeb9cb21e38306d352b08bcc5f4497000e3b639562a99dce4e490548c2c236b05ef279c100137828e6b0ca3df250d64cc8071a2c07981cd6bae176c449b95884b3a6043a3c08c1b14b5adb91d457b7f62c2373c73b97ef6d7d9371bef317e6a8725d2f94dd0ec021f0517ee2f718b80a903463669eb6e26", 0xba, 0x9b4, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, &(0x7f0000001940)="b15fab2da134b4643f6519b80a6ccf60909296202dbdaf9981dc15bbed047813a514c17e66a1db0a28c53c6a1db326436b74a73e676b9f1c4ed7fb941ff6d5c1450420c1bf2d8a3e1342070f525bd5424253ea445344499a25e601d2afaca877e0100cf679a8c8edab9b85fc10673a9885ffb7f357ebd0043509da96f15cb504a0d7e1d20f2270c6ef37796c18e7df30e9f9c3103d16d96685f3930201562943cdf68e30e7bb0aac9b136dfa9e1c392fd92b98bb8b53eb105e5e15ccf7c47719216cb81fe54524cf8d4edc41b97e892ffffbb9446017819f31ccfb2520857910cf4807e6cb9dca2abd", 0xe9, 0x7000000000000000, 0x0, 0x2, r3}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, &(0x7f0000001a80)="ad6c21d02959f55acd8e68c0a99e78de6e767620fbbae1ba0800d4a9ab72e3187e9c", 0x22, 0x2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000001c00)="18b2793afef6a05443cd13cf237d52468b789147048e730b20ae72174225ffea8798804f6cd1f4031d528fd9a9bfb4c781ef31974a361d2b5bf6c4aa0a85f61e5e0d3c9770aa0e96ca6759fe6e2eb598e298956dc2495b9084379d139bb54abb493fa8566ca9ac3ac1939860cc3ad37bbb3eb379a08aa70edf41511547b51ad78685999c84904cac10452fed203d8145000d1f6cd094b02de6020f3a8a87f9e77ab3273a1c9860fd24c0cd0f4fde622c455fc9b30848c94dd40683076d860dacc62bbf28679f6988", 0xc8, 0xffffffff, 0x0, 0x1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001d80)="3d6e2b45aa1ec476c35245e85f612dcf019300d8d89be7018ed071d270c874147e66cd5feb49e0c6ce2c8d6df51e243f87d701f6337fadeb52ed067d36d952b973c2d2c8c582d5e906141ef7e8c1e64952731b204d21077e637338cf8e680672cfcf81ecc7a57e1ae81cf3aaa4807961f846ae7bd6eb66043698bcc688fe66cef6bb9347a83286", 0x87, 0x7, 0x0, 0x2}]) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000002c0)) capset(&(0x7f0000000100)={0x2a5c4ef59d9960f7}, &(0x7f0000000240)={0x4000000, 0x0, 0xfffffffc, 0x43c0, 0x3ff, 0x9}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000079b, 0x1000000, 0x0, 0x10}]) [ 234.949017][ T7586] Cannot find add_set index 0 as target 12:53:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) 12:53:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) 12:53:38 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') exit(0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1, 0x4, 0x0) 12:53:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) 12:53:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c4442ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 12:53:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) 12:53:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:39 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4008886) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000440)) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f00000001c0)={0x20071026}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0xfffffffe, 0x8718, 0x9}) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000001840)=""/176, 0xb0}], 0x2) io_submit(r1, 0x7, &(0x7f0000001ec0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0xfff}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="2dda3efd54ea6affca7c4eab62a66942659a86d1e21a2986f2f6f9a0c6563c5eb13d0d369e1c721060c8b339c7be0ee2400d2d7a2ec88a7b97179d2b3beaef5b3c1185dbeb1f595991678b10f57485e35f8603b5758a3ce64ca5f0431a", 0x5d, 0x200}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000001700)="fdf0a23e12850b01232c2b70ac7c3356390e1fdd594703c07aeaaf0e699d7efb86ea041a16768744110969c05d460ff522a540e30258c88398cc46586212c29e5034eaeb9cb21e38306d352b08bcc5f4497000e3b639562a99dce4e490548c2c236b05ef279c100137828e6b0ca3df250d64cc8071a2c07981cd6bae176c449b95884b3a6043a3c08c1b14b5adb91d457b7f62c2373c73b97ef6d7d9371bef317e6a8725d2f94dd0ec021f0517ee2f718b80a903463669eb6e26", 0xba, 0x9b4, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, &(0x7f0000001940)="b15fab2da134b4643f6519b80a6ccf60909296202dbdaf9981dc15bbed047813a514c17e66a1db0a28c53c6a1db326436b74a73e676b9f1c4ed7fb941ff6d5c1450420c1bf2d8a3e1342070f525bd5424253ea445344499a25e601d2afaca877e0100cf679a8c8edab9b85fc10673a9885ffb7f357ebd0043509da96f15cb504a0d7e1d20f2270c6ef37796c18e7df30e9f9c3103d16d96685f3930201562943cdf68e30e7bb0aac9b136dfa9e1c392fd92b98bb8b53eb105e5e15ccf7c47719216cb81fe54524cf8d4edc41b97e892ffffbb9446017819f31ccfb2520857910cf4807e6cb9dca2abd", 0xe9, 0x7000000000000000, 0x0, 0x2, r3}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, &(0x7f0000001a80)="ad6c21d02959f55acd8e68c0a99e78de6e767620fbbae1ba0800d4a9ab72e3187e9c", 0x22, 0x2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000001c00)="18b2793afef6a05443cd13cf237d52468b789147048e730b20ae72174225ffea8798804f6cd1f4031d528fd9a9bfb4c781ef31974a361d2b5bf6c4aa0a85f61e5e0d3c9770aa0e96ca6759fe6e2eb598e298956dc2495b9084379d139bb54abb493fa8566ca9ac3ac1939860cc3ad37bbb3eb379a08aa70edf41511547b51ad78685999c84904cac10452fed203d8145000d1f6cd094b02de6020f3a8a87f9e77ab3273a1c9860fd24c0cd0f4fde622c455fc9b30848c94dd40683076d860dacc62bbf28679f6988", 0xc8, 0xffffffff, 0x0, 0x1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001d80)="3d6e2b45aa1ec476c35245e85f612dcf019300d8d89be7018ed071d270c874147e66cd5feb49e0c6ce2c8d6df51e243f87d701f6337fadeb52ed067d36d952b973c2d2c8c582d5e906141ef7e8c1e64952731b204d21077e637338cf8e680672cfcf81ecc7a57e1ae81cf3aaa4807961f846ae7bd6eb66043698bcc688fe66cef6bb9347a83286", 0x87, 0x7, 0x0, 0x2}]) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000002c0)) capset(&(0x7f0000000100)={0x2a5c4ef59d9960f7}, &(0x7f0000000240)={0x4000000, 0x0, 0xfffffffc, 0x43c0, 0x3ff, 0x9}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000079b, 0x1000000, 0x0, 0x10}]) 12:53:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) [ 236.078068][ T7624] Cannot find add_set index 0 as target 12:53:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') exit(0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1, 0x4, 0x0) 12:53:39 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965340450c3061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00090100000012"], 0x0, 0x0, 0x0, 0x0}) 12:53:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) [ 236.832312][ T5571] usb 6-1: new high-speed USB device number 6 using dummy_hcd 12:53:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:53:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) 12:53:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x13}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x25) ioctl$UI_SET_MSCBIT(r0, 0x5501, 0x0) 12:53:40 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4008886) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000440)) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f00000001c0)={0x20071026}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0xfffffffe, 0x8718, 0x9}) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000001840)=""/176, 0xb0}], 0x2) io_submit(r1, 0x7, &(0x7f0000001ec0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0xfff}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="2dda3efd54ea6affca7c4eab62a66942659a86d1e21a2986f2f6f9a0c6563c5eb13d0d369e1c721060c8b339c7be0ee2400d2d7a2ec88a7b97179d2b3beaef5b3c1185dbeb1f595991678b10f57485e35f8603b5758a3ce64ca5f0431a", 0x5d, 0x200}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000001700)="fdf0a23e12850b01232c2b70ac7c3356390e1fdd594703c07aeaaf0e699d7efb86ea041a16768744110969c05d460ff522a540e30258c88398cc46586212c29e5034eaeb9cb21e38306d352b08bcc5f4497000e3b639562a99dce4e490548c2c236b05ef279c100137828e6b0ca3df250d64cc8071a2c07981cd6bae176c449b95884b3a6043a3c08c1b14b5adb91d457b7f62c2373c73b97ef6d7d9371bef317e6a8725d2f94dd0ec021f0517ee2f718b80a903463669eb6e26", 0xba, 0x9b4, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, &(0x7f0000001940)="b15fab2da134b4643f6519b80a6ccf60909296202dbdaf9981dc15bbed047813a514c17e66a1db0a28c53c6a1db326436b74a73e676b9f1c4ed7fb941ff6d5c1450420c1bf2d8a3e1342070f525bd5424253ea445344499a25e601d2afaca877e0100cf679a8c8edab9b85fc10673a9885ffb7f357ebd0043509da96f15cb504a0d7e1d20f2270c6ef37796c18e7df30e9f9c3103d16d96685f3930201562943cdf68e30e7bb0aac9b136dfa9e1c392fd92b98bb8b53eb105e5e15ccf7c47719216cb81fe54524cf8d4edc41b97e892ffffbb9446017819f31ccfb2520857910cf4807e6cb9dca2abd", 0xe9, 0x7000000000000000, 0x0, 0x2, r3}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, &(0x7f0000001a80)="ad6c21d02959f55acd8e68c0a99e78de6e767620fbbae1ba0800d4a9ab72e3187e9c", 0x22, 0x2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000001c00)="18b2793afef6a05443cd13cf237d52468b789147048e730b20ae72174225ffea8798804f6cd1f4031d528fd9a9bfb4c781ef31974a361d2b5bf6c4aa0a85f61e5e0d3c9770aa0e96ca6759fe6e2eb598e298956dc2495b9084379d139bb54abb493fa8566ca9ac3ac1939860cc3ad37bbb3eb379a08aa70edf41511547b51ad78685999c84904cac10452fed203d8145000d1f6cd094b02de6020f3a8a87f9e77ab3273a1c9860fd24c0cd0f4fde622c455fc9b30848c94dd40683076d860dacc62bbf28679f6988", 0xc8, 0xffffffff, 0x0, 0x1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001d80)="3d6e2b45aa1ec476c35245e85f612dcf019300d8d89be7018ed071d270c874147e66cd5feb49e0c6ce2c8d6df51e243f87d701f6337fadeb52ed067d36d952b973c2d2c8c582d5e906141ef7e8c1e64952731b204d21077e637338cf8e680672cfcf81ecc7a57e1ae81cf3aaa4807961f846ae7bd6eb66043698bcc688fe66cef6bb9347a83286", 0x87, 0x7, 0x0, 0x2}]) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000002c0)) capset(&(0x7f0000000100)={0x2a5c4ef59d9960f7}, &(0x7f0000000240)={0x4000000, 0x0, 0xfffffffc, 0x43c0, 0x3ff, 0x9}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000079b, 0x1000000, 0x0, 0x10}]) 12:53:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:53:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x13}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x25) ioctl$UI_SET_MSCBIT(r0, 0x5501, 0x0) [ 237.164177][ T7663] input: syz1 as /devices/virtual/input/input12 12:53:40 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) [ 237.272028][ T5571] usb 6-1: New USB device found, idVendor=0c45, idProduct=6130, bcdDevice=7c.88 [ 237.281159][ T5571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.326401][ T5571] usb 6-1: config 0 descriptor?? 12:53:40 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) [ 237.404363][ T5571] gspca_main: sonixj-2.14.0 probing 0c45:6130 [ 237.476147][ T7672] input: syz1 as /devices/virtual/input/input13 12:53:40 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) [ 238.481700][ T5571] gspca_sonixj: reg_w1 err -71 [ 238.514972][ T5571] sonixj: probe of 6-1:0.0 failed with error -71 [ 238.524800][ T5571] usb 6-1: USB disconnect, device number 6 12:53:42 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965340450c3061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00090100000012"], 0x0, 0x0, 0x0, 0x0}) 12:53:42 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) 12:53:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x13}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x25) ioctl$UI_SET_MSCBIT(r0, 0x5501, 0x0) 12:53:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:53:42 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) 12:53:42 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4008886) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000440)) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f00000001c0)={0x20071026}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0xfffffffe, 0x8718, 0x9}) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000001840)=""/176, 0xb0}], 0x2) io_submit(r1, 0x7, &(0x7f0000001ec0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0xfff}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="2dda3efd54ea6affca7c4eab62a66942659a86d1e21a2986f2f6f9a0c6563c5eb13d0d369e1c721060c8b339c7be0ee2400d2d7a2ec88a7b97179d2b3beaef5b3c1185dbeb1f595991678b10f57485e35f8603b5758a3ce64ca5f0431a", 0x5d, 0x200}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000001700)="fdf0a23e12850b01232c2b70ac7c3356390e1fdd594703c07aeaaf0e699d7efb86ea041a16768744110969c05d460ff522a540e30258c88398cc46586212c29e5034eaeb9cb21e38306d352b08bcc5f4497000e3b639562a99dce4e490548c2c236b05ef279c100137828e6b0ca3df250d64cc8071a2c07981cd6bae176c449b95884b3a6043a3c08c1b14b5adb91d457b7f62c2373c73b97ef6d7d9371bef317e6a8725d2f94dd0ec021f0517ee2f718b80a903463669eb6e26", 0xba, 0x9b4, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, &(0x7f0000001940)="b15fab2da134b4643f6519b80a6ccf60909296202dbdaf9981dc15bbed047813a514c17e66a1db0a28c53c6a1db326436b74a73e676b9f1c4ed7fb941ff6d5c1450420c1bf2d8a3e1342070f525bd5424253ea445344499a25e601d2afaca877e0100cf679a8c8edab9b85fc10673a9885ffb7f357ebd0043509da96f15cb504a0d7e1d20f2270c6ef37796c18e7df30e9f9c3103d16d96685f3930201562943cdf68e30e7bb0aac9b136dfa9e1c392fd92b98bb8b53eb105e5e15ccf7c47719216cb81fe54524cf8d4edc41b97e892ffffbb9446017819f31ccfb2520857910cf4807e6cb9dca2abd", 0xe9, 0x7000000000000000, 0x0, 0x2, r3}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, &(0x7f0000001a80)="ad6c21d02959f55acd8e68c0a99e78de6e767620fbbae1ba0800d4a9ab72e3187e9c", 0x22, 0x2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000001c00)="18b2793afef6a05443cd13cf237d52468b789147048e730b20ae72174225ffea8798804f6cd1f4031d528fd9a9bfb4c781ef31974a361d2b5bf6c4aa0a85f61e5e0d3c9770aa0e96ca6759fe6e2eb598e298956dc2495b9084379d139bb54abb493fa8566ca9ac3ac1939860cc3ad37bbb3eb379a08aa70edf41511547b51ad78685999c84904cac10452fed203d8145000d1f6cd094b02de6020f3a8a87f9e77ab3273a1c9860fd24c0cd0f4fde622c455fc9b30848c94dd40683076d860dacc62bbf28679f6988", 0xc8, 0xffffffff, 0x0, 0x1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001d80)="3d6e2b45aa1ec476c35245e85f612dcf019300d8d89be7018ed071d270c874147e66cd5feb49e0c6ce2c8d6df51e243f87d701f6337fadeb52ed067d36d952b973c2d2c8c582d5e906141ef7e8c1e64952731b204d21077e637338cf8e680672cfcf81ecc7a57e1ae81cf3aaa4807961f846ae7bd6eb66043698bcc688fe66cef6bb9347a83286", 0x87, 0x7, 0x0, 0x2}]) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000002c0)) capset(&(0x7f0000000100)={0x2a5c4ef59d9960f7}, &(0x7f0000000240)={0x4000000, 0x0, 0xfffffffc, 0x43c0, 0x3ff, 0x9}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000079b, 0x1000000, 0x0, 0x10}]) [ 239.033244][ T7683] input: syz1 as /devices/virtual/input/input14 12:53:42 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) 12:53:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x13}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x25) ioctl$UI_SET_MSCBIT(r0, 0x5501, 0x0) 12:53:42 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000008c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) 12:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) [ 239.270588][ T7694] input: syz1 as /devices/virtual/input/input15 12:53:42 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 239.321901][ T5571] usb 6-1: new high-speed USB device number 7 using dummy_hcd 12:53:42 executing program 3: r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 239.376424][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.701882][ T5571] usb 6-1: New USB device found, idVendor=0c45, idProduct=6130, bcdDevice=7c.88 [ 239.715700][ T5571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.737058][ T5571] usb 6-1: config 0 descriptor?? [ 239.793953][ T5571] gspca_main: sonixj-2.14.0 probing 0c45:6130 [ 240.881797][ T5571] gspca_sonixj: reg_w1 err -71 [ 240.921759][ T5571] sonixj: probe of 6-1:0.0 failed with error -71 [ 240.933067][ T5571] usb 6-1: USB disconnect, device number 7 12:53:44 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965340450c3061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00090100000012"], 0x0, 0x0, 0x0, 0x0}) 12:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 12:53:44 executing program 3: r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 12:53:44 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:53:44 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:44 executing program 3: r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 241.433384][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:44 executing program 3: r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 12:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 12:53:44 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) [ 241.584106][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) [ 241.636519][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.741679][ T5571] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 242.112273][ T5570] Bluetooth: hci2: command 0x0406 tx timeout [ 242.152897][ T5571] usb 6-1: New USB device found, idVendor=0c45, idProduct=6130, bcdDevice=7c.88 [ 242.166551][ T5571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.181456][ T5571] usb 6-1: config 0 descriptor?? [ 242.223719][ T5571] gspca_main: sonixj-2.14.0 probing 0c45:6130 [ 243.301738][ T5571] gspca_sonixj: reg_w1 err -71 [ 243.342371][ T5571] sonixj: probe of 6-1:0.0 failed with error -71 [ 243.351121][ T5571] usb 6-1: USB disconnect, device number 8 12:53:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965340450c3061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00090100000012"], 0x0, 0x0, 0x0, 0x0}) 12:53:47 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:47 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:53:47 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="b5c1f9302c72ba5917f5538951b99f54f0bb2f15ce1045f52080a7fc4b41e19d6a670c20379131aa7319d016fbd95f9a931b415fdc38e887824da47ee3cc643399d434dd4de2534a92d841c02474ffa985ca29cbc40db5360cb94ed2ae36be02865cf446a382f59410717e514dde275a5100489b3e4d239e9ebc1470e86afca9d22096c059b5ff7839cabc15fad6587b1cb203688ac8bfe4aca7d6d5649a01a0187d9f5283454f1da4ca23ecc04b1db00ab73cf5559c40b69d55a99125b7164b1d41c68f960500f23d186b37f6b445089a8acf78f35bf0911a2f1170bd22d803e6009e1388742d72f8ed3b1435ff08931f8f7fa2badbb24f2433070742b42bd5c95a87494d155d52a069b123e484147378aa867a2d632dfa61666908ebcb7fa7f20a944df4b335499b4de0d8535cd59740ff486a631bce83c26ee68bba16a73a8855c7351355e38d81e16b25b728d6869cdb2ad11bcb96e34646c076798638681ba727b3e5a47aa404b17aea2a0568ea9f619f099a2b8dedba8bf3e935d0376529acf2ff068e0953e2fe1796e0f41c6775e4fe1b4c58cae9520bc09e2f68cf4c3ab8210b3fee204bd6a55fa9cc585a3078b83c27dec06756f7e16dec1e0fb7a18451925dec77174674a605f51e78c0f06ae955b44281990c3bcf3f707909ca8d0137627b2933badd9a4644383ec25ed97863bcd864b53d02c6338632d6fbbfc0246f4a264aba831b8f348f2720d776a432de9a9e5addbd69088de1caf64cbb510701487f4dba24962eea2bc2b2e2086d23ad5f3bdbe8e6223d2d223aa1f4632468476804803cec7664abc85c04ad83085925940c96070d5ab5eaf3519119af8c47960c5743d624aed899cf112f18da29244bbdf6c32a9a9a25abadc62c0ca2d352ac81d69bccd500078aa1efc3946bca816a0bcf38ee158ba0867cfa624527b53baac14bfea0a35cc193cbe4122e1155166484e518f5252d0424770ddf8b5ae18d6cffdfaad45577c77632bacb466a08a2cdecd0ab1015b5038917ed601b21921000a9af6a41f9d2d7f7e53a46d185e63f05a0ed43e8176685701ba8d23f63765717b6401db3d2e1cdea1f467df3acc97861649fc28b70217038c5b4de362294e5f96e31a45bd0fb8274c4d77e3c5556dcd6793cda3d4b3ec5405ae8e48ae5ee6dc2c0e8b0085adf0f7941573aa98882b4e7ea22e0328c10a96cb20b112f834d63e06fe222f45aaec3670dd8d5a58d2736ce103aba71d1861442a1bbddaebfcd33b899b1aaf87435e80584002201a4e3d39a16e5f16a50986fee165b056acef32049a01f251b7c976d0cac332338ccc491667bdd179483e9a38109456b4b972dfc3e176989939929de7f0fa2134876fa432c769a0a37c10f02bb5f678b02ab94b594ccf35fb463f8b41a20f8e17d8296770f1bf507342b4bde979515a2161dbf9f6110dfdb6433ee0ce519e8002d70db2f933f9500850ac9c23ad73e563595311b0abf5116dad2e5c8752ee42c9f268c7d3baeb1b33e680bcbc1e53de149c9568e3e51a26f941ae584097899ab42645e522a9a249dee0b211296ab1853f96aacf1fe0e35dd644d1b453893d3e288d4b52bfe7fcac0e05e623ba531042591f794287f4d5df4de07ff703f04539de51ce37a93f4749a901bb1630a4025f585260c2b3b9f9722dee0b444374a1a0989732719b455372733763181615d3d4dd2c4145a9dbebfb33b425c827293395d4674bb79b934db93242ebed58c453caeb61bc8a6c5031166e038c89aa4aa23fcf6cd2cffc06404e17440047f3015823d0933be40395a1a95ab90eddfa97ca843b46b3423234629d40191381283f2f8745b0ffe482e72ea6956fcd13ff5f5a284c03e37fe07db6a622c8fd56fdf638fff4e32378c26ea18f3ad103f03b0fc2c0e6630095b2e2b958b87fb9f569fb14bd80fb9bb76086bb8d870cfd80b32dd290bffc2e20e569dd1c14e85be540bed7209041cbaae992f242590dbe0d7ff7caf417ae7d36aa2bb279b401dcc3fcb28e9dd83d48aa63b7ba57df4702a2aa4627ace7d08daf4165d7fc9aeee8a21f7435c4a8cd6d6088896782b81e13a988f3932e3daf9fbe26bd7783084c2579e232e70e71d13a873126bdfd4075916c4598c673e529aee63bdaaf47cb678a8b6b000b08ecbe9ed769fe089205d0cad112b6438bb09cdc425bc1671ae1994346ee8eee8f3dae267723b8cd0bc6e2b70b722250641eb56522bbfc87d222a65ff8d9f5c80a53054f3cccbfb3b1fc62443f08fd8450d82e4aa46a81cf24c1ef9eed798c59e422c26cf6a6b0d07f9be7507846f88b27849eae84fb59d6b3de23a9113e370335ea131deedcda8b4ab93344d3483ef1a122f9199f65c4be3628d9ca6a2bc3d5ef80ad07511bc452abcb526a1d5b764d42b42e227b440601993881682c0d5bcb673392afad8024c3be417ca33c3b4ca25e41e4101d48852575889e31ddfca945ec3da6e227a2fc9cc5737833397a277cc5604018e3b68870570efb9bc21047f82ed645fc6290254ccd25c6bbde001cb093901f302a1cbd707bc968f8d0e6e68b10a7f1d2862e37bcaadf17517a702214c2e68965b21a71620f4ea2d01fcfc5fd4bd5db3fc172ed12f5e5af3ffa438c25976725d53b431d0dcb05fcba4740512154e404025e3a1c3b19edd0bd89854410953ad604af3b194e2098bf7888b7768fc0e88473316c19f07c23ab47a860885f5f49cd92fe6c8380be13a68a32d9713ef6844671ec0e1753e9072cc9f579ee84bc429142ca33d51d0b2b8557c4187033de3e4fd58301ff9388a626122b49effc8b6361c385176d30d8a69d51f3eb027d32901d8f09b04ac78e7346abb1d5b79d5d8aaaed9c53656640c7404c3febf8b55502b8ea7c9b70d04fae01ae361847e4dfff53e53dc87811d7bc1e78cb4235e15960fd8fc8b384402899ed0271d48a14b8b047bff943a5bab4e7048133bd57209694210096d8c87ea284e01f15b89649d27574c17b9c2234de5d602aab0a4e85024605fd3f394baf039bc0ddccfd83ecd1f1c0565e1fa1371ca33117ac1873c35e43514d3857f81515134fbaeabb17ea9e764da72f2df3fc1322739421ae3892a26498fa5fbe10357d1057e583305dd20714ceeaec7dcd3c15c8a61a4381d3d2a77ebf87e98b1444b8f27bfd9ebc93a7b86cecd4c0dce8b371bc4f4750525d15d6ae7150906fa2b7ea0beb709a32ecb3903bb9bcf4de6e80f0583db0d775aba72e0a920c0960a61131a3316d97b6394b797325243e729d1a18d1063dbb91e3af28729f0175528c3653445f5aa417e484234d811ad84dd909c8c6dbbaff2b1a76526fa27f52f5e06b3e3d2a4e0b6b2a2c80e6bd04c72f592f7dae10b23f5da0b5101861e75190e8ef6a95194e2ac7bae22521863019fca9c7787c8491c4b3789494c3d4567485cc4c1633f4ab87ce2d36a9d7a90367a9ca0763b7e36f8ab0a853b069b61f2a0c40e9d1c2526dd7add3c009d839d43d6cbbdb3b79ca9f25e451b2c61b172d2508a8e719e6862faf8792790d7d836eb302d934dd686af4b5153c64804ce01e30eadd54d71d03f7a7e8a1bc6f94316fbd23e050cb90962e4a1b61d337e6bd95bb0c2257882d22332ab5fa57f9cf4d5c3fde7db13cb6faf57617ea1779c958a8263e1625c03ef331879b8e7f129a362418d29364dcf0a64335b695172440dc9adb2315577d1f728d80b6c86800fd4d4ec2b85c31328e795a29f4108f2f39c129a047ff98cd7f4c56da774280b473fd9fafd9b2b0ab791dd48050a9144322a14ee3ae3cd251557f06664ec83154ec73ddaa2a4071332ac53868eeeec3dadae84fec20187c8c43c6f92820fa7ac9352b21ab4c411f4741fd0d682632e6160fc5691d891bcf770c57979cb9d123a48661753cc64fc59a4b0e2238134af0bc5ecabbb6bb17ee482d2355afccffcaeacdf40f4c34e6f0775ab12595e07b5410f89e912dcd696d612386295ea7ed78e806d19a03883848102e3765b50e88a1d6a94736e7442336a3a8b489b219bfa274569e19851ef187e20f764383d4b1551d83eac683cb8a8d60c8714076226a2552ddfdc16949a415bfbac049f33c5df662930946af78d99dd473ec1100634f99f2446e0fac4d620879d3acf7e8ce267af3437572f23c101604fac3b1fc74e4dc51c44d899cbca7f5992d007e2180c51aa0f75bd6c38a957eae5d68c093930b7faa87efbf6f354f961a9d060656c8e61a933b1c8cc2943babb4508027d5230868079c3fef65b750843bfb9e1c4b154e65f788ece60af91255f99ef685f06559f4d86562226580b28ba63b9cbe064820a03490ed1e1b8d2eb8b2d9c898d369b0852c5adccc0dd998a4e73bb2bc0db06aa3840f23f6a2ac6f523e965de6fd5777962f6a080a39b089009f1ead69aeee8e4fef6474df045263d8a4f6072e3c359110f95ef397ea741c561e06e6bb5be7f5921c0063b8cd9b913c32d1edfb0ffd9457b5bfff39252d2a0644cf696228fa7ab9534aec943db27322476d052483773d391539679e4585a0fd16bb4e0968818c091d3e5f18aca21425151bba9124e9e8c617ee361e9f2fbbc7fd27b792c4b4122ab97ba18ff76ede1d0556f3d07d99599a8e80cacc667554d724c23510887e475b8ab8db139d9299b1d9ab02046b034693527b5687004b7a4570cec76f74df3924cfc0a54e528dfd3edf7d34b4df00c2f9e55fc2886a5c9c660abfe730bf064fc684f1c3ea5519990fa13ec35f65eed41f39f57450cce261f9ad3cc895fa384833e4ea25ceb551aed13dc2644d369eb9690dd373b113eb42eb23661b9d0eb789b21987e0116543e18d79a42045634960eda8ed9a773105d3b15a7a4792f9989f6af0fce6e68d4853ddbef9591b7be89cff1ff16461a32f4a6531cdb0990934dc5acd0ffffb59d01311b587fbc43bd2b6ded71affc86240c7c3dfd555adcd82e05b691134e58768bd804be938c7f6044e046f177b4ddd696757e0b25edc9ea4145cee0403bd08768b69d1e87431856d5aa91fc83277d0359832eeea193385202df79aae421a1195ca28a2d98f6af2705ed3bcaf700483a21417dbd5738b8dc51b562501ec852ca60840c68ad7bc53c76e5762c4d129a1a5adc50b3f4b0e64a444db9826db7f59df386b98a3c2b8fb443d2099471c8b4f67ed450cca707a95674efdf9eaf18f4e32a405b4ebfeef06cf3cb60ce653edeafde8c8b93c503df5cdecf4eccce43d13a0680247b85134fa712ebed508f720970648e2ec5c52f80a0a288c5384c078c406f7ff5b38ebfcce9a55c5a9b097ea6f663621189c3347bc2174d2df3ac3cd53f37cfa95cdc0559b51da960b685a5a02b16ef25fa54b51b270cd915f5baba900408bbec4f5d6d253dbed298645924942a96392152ff1ecb3116677d77ee0ef19e46aad4e998b4e2d7df635e5d0bcd139cd6dc7406a7c541f049b085f6e3f777361bf297ecfb5e124d75fa9e6ffde42fa718d2d12fb9b503aab12f9104de87ebc3b5777600d43b611bb479746eeaddbcac424b92a5003379834790ce14e957f194ca6bcb2318f5f7b6851244dcc735bebda98aeb5ac1cbdf55685c1a", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:53:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:53:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:53:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:47 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:47 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 244.171642][ T5715] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 244.542082][ T5715] usb 6-1: New USB device found, idVendor=0c45, idProduct=6130, bcdDevice=7c.88 [ 244.565605][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.604486][ T5715] usb 6-1: config 0 descriptor?? [ 244.663648][ T5715] gspca_main: sonixj-2.14.0 probing 0c45:6130 [ 245.751696][ T5715] gspca_sonixj: reg_w1 err -71 [ 245.781787][ T5715] sonixj: probe of 6-1:0.0 failed with error -71 [ 245.789777][ T5715] usb 6-1: USB disconnect, device number 9 12:53:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:49 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x101) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @window, @sack_perm, @timestamp, @mss, @timestamp, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000003c0)="7a59a5f12741a6d1c2eaa8ed14a00f710c312c7e6774d5c2cc3b2d05d65cd8a9b42e1cd6d79a3e363ef791f5c2407f2d1b", 0x31, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xf30, 0x805, 0x0, 0x0) 12:53:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xf6ffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) 12:53:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xf6ffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) 12:53:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xf6ffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) 12:53:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @window, @sack_perm, @timestamp, @mss, @timestamp, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000003c0)="7a59a5f12741a6d1c2eaa8ed14a00f710c312c7e6774d5c2cc3b2d05d65cd8a9b42e1cd6d79a3e363ef791f5c2407f2d1b", 0x31, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xf30, 0x805, 0x0, 0x0) 12:53:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xf6ffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) 12:53:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 12:53:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @window, @sack_perm, @timestamp, @mss, @timestamp, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000003c0)="7a59a5f12741a6d1c2eaa8ed14a00f710c312c7e6774d5c2cc3b2d05d65cd8a9b42e1cd6d79a3e363ef791f5c2407f2d1b", 0x31, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xf30, 0x805, 0x0, 0x0) 12:53:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @window, @sack_perm, @timestamp, @mss, @timestamp, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000003c0)="7a59a5f12741a6d1c2eaa8ed14a00f710c312c7e6774d5c2cc3b2d05d65cd8a9b42e1cd6d79a3e363ef791f5c2407f2d1b", 0x31, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xf30, 0x805, 0x0, 0x0) 12:53:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 12:53:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) [ 248.210468][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:53:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) [ 248.545122][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:53:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 12:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 12:53:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) [ 248.864677][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:53:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x56c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001140)=0x80, &(0x7f0000001180)=@l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x887bb4def260be54}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)="88c558aaf63cee7cba55a78df332edf391d45ac9a1074fd00768bc15d9d1a7e0e95a7578f36c60", 0x27}, {&(0x7f0000001240)="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", 0xf7c}, {&(0x7f0000002240)="91a00e42dbf79e03d82d747433fe1a84a72a44758c10dc96f571ab64449e75da9a0792262685d190a2fcabc1cd0dab99fdbcdac449539243dadeabcd6c985db5f15872d10bd954432b152b5b8b4446e46618940d8d63fa2e2458908cf7184ecd792b9baf5a7e71825ac515329113d54729225cd0d1496be86363a41a001e42b5f398d58707563adf88688ea724ea54908c9528ae06a61a5654db5d0778067f132b911c9498faa6", 0xa7}], 0x3, &(0x7f0000002340)}, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 12:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 12:53:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 12:53:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0}) [ 249.259028][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:53:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x2d7) [ 249.375910][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:53:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 12:53:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x2d7) 12:53:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x2d7) 12:53:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000040)=""/85, 0x55, 0x5) [ 249.557284][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:53:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x2d7) 12:53:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 12:53:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000040)=""/85, 0x55, 0x5) 12:53:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000040)=""/85, 0x55, 0x5) 12:53:53 executing program 1: syz_clone(0x40020100, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, &(0x7f0000001100)="02eb6cd39e9016d123eaf8f6ac05db69bcbc88e099bd9142b5aa5ca28631530586150a17a23a5caa294fb17fbb606dfcec7cca11c2c125695f60e75918e723f66214b2ca54b87b63a7275d7256d087712a5bc81af1eef6d10162916ec5f018b1c22977dc717549f026d095f6aec419f894a57a77ec02dcabe2f682f0e6fc2fd19431744357bfd6eee3980e0692", 0x8d, 0x0, &(0x7f0000001240), &(0x7f0000001280)="d104a1e0aaae2d784f74ac58fa86b098028c86bd8838d3b53530f03cd5bd6b16ad4d8fb4cb4413ba20aec14d2fa81384cc6270ffe7cbbbcad24b378f89fb48a2e62084425587cb8d72630fd2fa44c6e9dfce11a77377f9ee1021828ec3d394a1d3794eb6c3dfdc38a45e4ce03f523160febe3eb56e11292075dc8c6830eadacdceeac1fe63b1124a0fb4233232644745fdab5cea6acd88ce9cf2a081ad7f12b0") getpgid(0xffffffffffffffff) 12:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 12:53:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc058565d, &(0x7f0000000740)) 12:53:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x2}]}}}]}, 0x4c}}, 0x0) 12:53:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000040)=""/85, 0x55, 0x5) 12:53:53 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) [ 250.059200][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:53:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x2}]}}}]}, 0x4c}}, 0x0) 12:53:53 executing program 0: syz_clone(0x41000480, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000300), 0x0) syz_clone(0x0, &(0x7f00000001c0)="830acacddfd364bd1843f6add18ae38c1b47a90f", 0x14, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="13fecef5f79cd461dba4d2c5a1f5e7b6") 12:53:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x30, 0x0, &(0x7f0000000300)) 12:53:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x30, 0x0, &(0x7f0000000300)) 12:53:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x2}]}}}]}, 0x4c}}, 0x0) 12:53:53 executing program 4: mlockall(0x2) brk(0x55555ede2001) 12:53:53 executing program 1: syz_clone(0x40020100, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, &(0x7f0000001100)="02eb6cd39e9016d123eaf8f6ac05db69bcbc88e099bd9142b5aa5ca28631530586150a17a23a5caa294fb17fbb606dfcec7cca11c2c125695f60e75918e723f66214b2ca54b87b63a7275d7256d087712a5bc81af1eef6d10162916ec5f018b1c22977dc717549f026d095f6aec419f894a57a77ec02dcabe2f682f0e6fc2fd19431744357bfd6eee3980e0692", 0x8d, 0x0, &(0x7f0000001240), &(0x7f0000001280)="d104a1e0aaae2d784f74ac58fa86b098028c86bd8838d3b53530f03cd5bd6b16ad4d8fb4cb4413ba20aec14d2fa81384cc6270ffe7cbbbcad24b378f89fb48a2e62084425587cb8d72630fd2fa44c6e9dfce11a77377f9ee1021828ec3d394a1d3794eb6c3dfdc38a45e4ce03f523160febe3eb56e11292075dc8c6830eadacdceeac1fe63b1124a0fb4233232644745fdab5cea6acd88ce9cf2a081ad7f12b0") getpgid(0xffffffffffffffff) 12:53:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:53 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x13, 0x701, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "029f973e"}]}, 0x54}}, 0x0) 12:53:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x30, 0x0, &(0x7f0000000300)) 12:53:53 executing program 4: mlockall(0x2) brk(0x55555ede2001) 12:53:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x2}]}}}]}, 0x4c}}, 0x0) 12:53:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:53 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x13, 0x701, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "029f973e"}]}, 0x54}}, 0x0) 12:53:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x30, 0x0, &(0x7f0000000300)) 12:53:53 executing program 4: mlockall(0x2) brk(0x55555ede2001) 12:53:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:54 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x13, 0x701, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "029f973e"}]}, 0x54}}, 0x0) 12:53:54 executing program 1: syz_clone(0x40020100, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, &(0x7f0000001100)="02eb6cd39e9016d123eaf8f6ac05db69bcbc88e099bd9142b5aa5ca28631530586150a17a23a5caa294fb17fbb606dfcec7cca11c2c125695f60e75918e723f66214b2ca54b87b63a7275d7256d087712a5bc81af1eef6d10162916ec5f018b1c22977dc717549f026d095f6aec419f894a57a77ec02dcabe2f682f0e6fc2fd19431744357bfd6eee3980e0692", 0x8d, 0x0, &(0x7f0000001240), &(0x7f0000001280)="d104a1e0aaae2d784f74ac58fa86b098028c86bd8838d3b53530f03cd5bd6b16ad4d8fb4cb4413ba20aec14d2fa81384cc6270ffe7cbbbcad24b378f89fb48a2e62084425587cb8d72630fd2fa44c6e9dfce11a77377f9ee1021828ec3d394a1d3794eb6c3dfdc38a45e4ce03f523160febe3eb56e11292075dc8c6830eadacdceeac1fe63b1124a0fb4233232644745fdab5cea6acd88ce9cf2a081ad7f12b0") getpgid(0xffffffffffffffff) 12:53:54 executing program 4: mlockall(0x2) brk(0x55555ede2001) 12:53:54 executing program 5: mlockall(0x2) brk(0x55555ede2001) 12:53:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:54 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x13, 0x701, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "029f973e"}]}, 0x54}}, 0x0) 12:53:54 executing program 5: mlockall(0x2) brk(0x55555ede2001) 12:53:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "2fc440a521b6"}}) 12:53:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600489f1009c1100fc000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 12:53:54 executing program 2: socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x10c1, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0xfff7}, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 12:53:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)) 12:53:54 executing program 5: mlockall(0x2) brk(0x55555ede2001) 12:53:54 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000ffe000/0x1000)=nil, 0x6) 12:53:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "2fc440a521b6"}}) 12:53:54 executing program 2: socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x10c1, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0xfff7}, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 12:53:54 executing program 1: syz_clone(0x40020100, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, &(0x7f0000001100)="02eb6cd39e9016d123eaf8f6ac05db69bcbc88e099bd9142b5aa5ca28631530586150a17a23a5caa294fb17fbb606dfcec7cca11c2c125695f60e75918e723f66214b2ca54b87b63a7275d7256d087712a5bc81af1eef6d10162916ec5f018b1c22977dc717549f026d095f6aec419f894a57a77ec02dcabe2f682f0e6fc2fd19431744357bfd6eee3980e0692", 0x8d, 0x0, &(0x7f0000001240), &(0x7f0000001280)="d104a1e0aaae2d784f74ac58fa86b098028c86bd8838d3b53530f03cd5bd6b16ad4d8fb4cb4413ba20aec14d2fa81384cc6270ffe7cbbbcad24b378f89fb48a2e62084425587cb8d72630fd2fa44c6e9dfce11a77377f9ee1021828ec3d394a1d3794eb6c3dfdc38a45e4ce03f523160febe3eb56e11292075dc8c6830eadacdceeac1fe63b1124a0fb4233232644745fdab5cea6acd88ce9cf2a081ad7f12b0") getpgid(0xffffffffffffffff) 12:53:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)) 12:53:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "2fc440a521b6"}}) 12:53:54 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000ffe000/0x1000)=nil, 0x6) 12:53:54 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 12:53:54 executing program 2: socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x10c1, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0xfff7}, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 12:53:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)) 12:53:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "2fc440a521b6"}}) 12:53:54 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000ffe000/0x1000)=nil, 0x6) 12:53:54 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x6a, 0xcd, 0xd6, 0x40, 0x130, 0x130, 0xe232, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x1b, 0x8e}}]}}]}}, 0x0) 12:53:54 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000ffe000/0x1000)=nil, 0x6) 12:53:54 executing program 2: socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x10c1, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0xfff7}, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 12:53:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x17, 0x69, 0x1, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 12:53:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)) 12:53:55 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0x37, 0x1, 0x40, 0x421, 0x1144, 0xf9b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfe, 0xfb}}]}}]}}, 0x0) 12:53:55 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 12:53:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) dup(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x1, 0x0, 0x3, 0x9}, ["", "", ""]}, 0xc}, 0x1, 0x0, 0x0, 0x14080}, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000200)={0x8, 0x8000009e, 0x3f}) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x6, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x636bfca178697ed3, 0x0, 0x4e24}, 0x6e) 12:53:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x17, 0x69, 0x1, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 12:53:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) 12:53:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x84, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_hsr\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x101}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x84}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80300898}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000880) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000080)={@rand_addr, 0x0, 0x2f, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x0, 0x0, 0x2}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, 0x464, 0x400, 0x70bd26, 0x25dfdbff, "b470e5654205aa1cefe005e48e78f75285352fc04a5dd9528742a9139e62553406e60480d4f72fba9e4a066d8f2e4fd7f0afce2233d0343199fac08b84ffa180128164e2addc5cf8d590ab56153e49222b5ada8cd476486be1dcad4aa160958f52aa7a86f257237411303004380526b955fc1973a2ff1e3da3af2be22a3ef41aa500cd9d034b9c2e84260794e4c821207eeb141b2335b107b5eb9cb09238213e9d9be734c881b1ff9ae6072d", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0xc008) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req={0x9, 0x1, 0x200, 0x7ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000340)={@local, 0x5, r4}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x138, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x108, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1d, 0x4}}, @IFLA_VLAN_INGRESS_QOS={0x7a, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0xc73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd1e7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcaa3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa1ae}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x89c0}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xae53, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x138}}, 0x0) [ 251.991613][ T3676] usb 6-1: new high-speed USB device number 10 using dummy_hcd 12:53:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x17, 0x69, 0x1, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) [ 252.075455][ T8015] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.133983][ T8013] loop7: detected capacity change from 0 to 8 [ 252.171789][ T1134] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 252.328047][ T8013] fs-verity (sda1, inode 1135): Malformed file signature [ 252.412304][ T3676] usb 6-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=e2.32 [ 252.431422][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.464772][ T3676] usb 6-1: config 0 descriptor?? [ 252.523678][ T3676] gspca_main: spca508-2.14.0 probing 0130:0130 [ 252.741788][ T3676] gspca_spca508: reg_read err -71 [ 252.747280][ T1134] usb 1-1: New USB device found, idVendor=0421, idProduct=1144, bcdDevice=f9.b9 [ 252.757182][ T1134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.765690][ T3676] gspca_spca508: reg_read err -71 [ 252.770975][ T1134] usb 1-1: Product: syz [ 252.775584][ T1134] usb 1-1: Manufacturer: syz [ 252.780203][ T1134] usb 1-1: SerialNumber: syz [ 252.785165][ T3676] gspca_spca508: reg_read err -71 [ 252.792820][ T1134] usb 1-1: config 0 descriptor?? [ 252.801858][ T3676] gspca_spca508: reg_read err -71 [ 252.821694][ T3676] gspca_spca508: reg_read err -71 [ 252.832912][ T1134] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 252.841851][ T3676] gspca_spca508: reg write: error -71 [ 252.847425][ T3676] spca508: probe of 6-1:0.0 failed with error -71 [ 252.895068][ T3676] usb 6-1: USB disconnect, device number 10 [ 253.036783][ T3681] usb 1-1: USB disconnect, device number 8 12:53:56 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x6a, 0xcd, 0xd6, 0x40, 0x130, 0x130, 0xe232, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x1b, 0x8e}}]}}]}}, 0x0) 12:53:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) 12:53:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x17, 0x69, 0x1, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 12:53:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) dup(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x1, 0x0, 0x3, 0x9}, ["", "", ""]}, 0xc}, 0x1, 0x0, 0x0, 0x14080}, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000200)={0x8, 0x8000009e, 0x3f}) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x6, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x636bfca178697ed3, 0x0, 0x4e24}, 0x6e) 12:53:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x84, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_hsr\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x101}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x84}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80300898}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000880) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000080)={@rand_addr, 0x0, 0x2f, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x0, 0x0, 0x2}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, 0x464, 0x400, 0x70bd26, 0x25dfdbff, "b470e5654205aa1cefe005e48e78f75285352fc04a5dd9528742a9139e62553406e60480d4f72fba9e4a066d8f2e4fd7f0afce2233d0343199fac08b84ffa180128164e2addc5cf8d590ab56153e49222b5ada8cd476486be1dcad4aa160958f52aa7a86f257237411303004380526b955fc1973a2ff1e3da3af2be22a3ef41aa500cd9d034b9c2e84260794e4c821207eeb141b2335b107b5eb9cb09238213e9d9be734c881b1ff9ae6072d", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0xc008) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req={0x9, 0x1, 0x200, 0x7ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000340)={@local, 0x5, r4}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x138, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x108, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1d, 0x4}}, @IFLA_VLAN_INGRESS_QOS={0x7a, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0xc73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd1e7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcaa3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa1ae}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x89c0}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xae53, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x138}}, 0x0) [ 253.302614][ T8027] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:56 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0x37, 0x1, 0x40, 0x421, 0x1144, 0xf9b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfe, 0xfb}}]}}]}}, 0x0) 12:53:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) 12:53:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x84, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_hsr\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x101}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x84}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80300898}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000880) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000080)={@rand_addr, 0x0, 0x2f, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x0, 0x0, 0x2}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, 0x464, 0x400, 0x70bd26, 0x25dfdbff, "b470e5654205aa1cefe005e48e78f75285352fc04a5dd9528742a9139e62553406e60480d4f72fba9e4a066d8f2e4fd7f0afce2233d0343199fac08b84ffa180128164e2addc5cf8d590ab56153e49222b5ada8cd476486be1dcad4aa160958f52aa7a86f257237411303004380526b955fc1973a2ff1e3da3af2be22a3ef41aa500cd9d034b9c2e84260794e4c821207eeb141b2335b107b5eb9cb09238213e9d9be734c881b1ff9ae6072d", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0xc008) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req={0x9, 0x1, 0x200, 0x7ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000340)={@local, 0x5, r4}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x138, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x108, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1d, 0x4}}, @IFLA_VLAN_INGRESS_QOS={0x7a, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0xc73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd1e7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcaa3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa1ae}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x89c0}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xae53, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x138}}, 0x0) [ 253.538972][ T8032] loop7: detected capacity change from 0 to 8 [ 253.576487][ T8037] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.581837][ T5570] usb 6-1: new high-speed USB device number 11 using dummy_hcd 12:53:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x84, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_hsr\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x101}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x84}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80300898}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000880) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000080)={@rand_addr, 0x0, 0x2f, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={@rand_addr, 0x0, 0x0, 0x0, 0x2}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, 0x464, 0x400, 0x70bd26, 0x25dfdbff, "b470e5654205aa1cefe005e48e78f75285352fc04a5dd9528742a9139e62553406e60480d4f72fba9e4a066d8f2e4fd7f0afce2233d0343199fac08b84ffa180128164e2addc5cf8d590ab56153e49222b5ada8cd476486be1dcad4aa160958f52aa7a86f257237411303004380526b955fc1973a2ff1e3da3af2be22a3ef41aa500cd9d034b9c2e84260794e4c821207eeb141b2335b107b5eb9cb09238213e9d9be734c881b1ff9ae6072d", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0xc008) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req={0x9, 0x1, 0x200, 0x7ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000340)={@local, 0x5, r4}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x138, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x108, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1d, 0x4}}, @IFLA_VLAN_INGRESS_QOS={0x7a, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0xc73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd1e7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcaa3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa1ae}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x89c0}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xae53, 0x2ed8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x138}}, 0x0) [ 253.678813][ T8041] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:57 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) 12:53:57 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) 12:53:57 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) [ 253.924361][ T8032] fs-verity (sda1, inode 1135): Malformed file signature [ 253.931631][ T3681] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 253.981986][ T5570] usb 6-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=e2.32 [ 254.004717][ T5570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.044846][ T5570] usb 6-1: config 0 descriptor?? [ 254.102976][ T5570] gspca_main: spca508-2.14.0 probing 0130:0130 [ 254.321731][ T5570] gspca_spca508: reg_read err -71 [ 254.342430][ T5570] gspca_spca508: reg_read err -71 [ 254.361764][ T5570] gspca_spca508: reg_read err -71 [ 254.381708][ T5570] gspca_spca508: reg_read err -71 [ 254.403543][ T5570] gspca_spca508: reg_read err -71 [ 254.421662][ T5570] gspca_spca508: reg write: error -71 [ 254.427182][ T5570] spca508: probe of 6-1:0.0 failed with error -71 [ 254.441801][ T5570] usb 6-1: USB disconnect, device number 11 [ 254.532391][ T3681] usb 1-1: New USB device found, idVendor=0421, idProduct=1144, bcdDevice=f9.b9 [ 254.541657][ T3681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.549801][ T3681] usb 1-1: Product: syz [ 254.554445][ T3681] usb 1-1: Manufacturer: syz [ 254.559197][ T3681] usb 1-1: SerialNumber: syz [ 254.567244][ T3681] usb 1-1: config 0 descriptor?? [ 254.612672][ T3681] cdc_phonet: probe of 1-1:0.0 failed with error -22 12:53:58 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x6a, 0xcd, 0xd6, 0x40, 0x130, 0x130, 0xe232, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x1b, 0x8e}}]}}]}}, 0x0) 12:53:58 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) 12:53:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) 12:53:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) 12:53:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) dup(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x1, 0x0, 0x3, 0x9}, ["", "", ""]}, 0xc}, 0x1, 0x0, 0x0, 0x14080}, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000200)={0x8, 0x8000009e, 0x3f}) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x6, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x636bfca178697ed3, 0x0, 0x4e24}, 0x6e) [ 254.858568][ T3681] usb 1-1: USB disconnect, device number 9 [ 255.102727][ T8061] loop7: detected capacity change from 0 to 8 [ 255.181765][ T5570] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 255.198639][ T8061] fs-verity (sda1, inode 1135): Malformed file signature [ 255.305767][ T8063] fs-verity (sda1, inode 1135): Malformed file signature 12:53:58 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0x37, 0x1, 0x40, 0x421, 0x1144, 0xf9b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfe, 0xfb}}]}}]}}, 0x0) 12:53:58 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) [ 255.402663][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.409053][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 12:53:58 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) 12:53:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) 12:53:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x1) unshare(0x6c060000) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/rfkill', 0x100, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd07d4581a079f9935d71cfa3e955141e9052539ff07ca6c2d05a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000007c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x14, "fd206eeeb5f520bec0bd4a13856cd10f2bacd368a5c2067fd117db3f2a60e4485531fa43852446bacebfaddc1cd70a2b66b4cee57e3200", "f83dc7c95968cf0025264cf7861370dc139b4cb8329355cf85769658babef591bc74b6df2ea416e239f89ff8bf5b93466a15aa227357b207eba6964fcfb13e5a", "7ccbfe1436c71a9b6b9f81f9491f65280523a0ee29cd857bcae727de9a497c59", [0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="f0", 0x3, 0x0, &(0x7f0000000240)="deef8d"}) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x198, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "060f9285c43e481f66aa500989b93facaf36972873182148642e5e04082792037202d0d3c6462bd23ba379b17e83bc6484121f9534ce668d2351f71cd3cdaa51096a0c4af5a92dc8e3183fcdb1e663677a7213dc7a12863b6495398467788fbde5b78089ff09d6b80ccd143906bd9458b5e361bc9180b95ad90682cee8de31eed4dac24533be065215bcfc204f73c6389d9a41dbd0a5aeeb082e3a80dd26deceab79f75e5b9962c4453cd65406c8aac40078fd374b6445e269f9ed7045137b79451bf4b1763baea57d938208cb380690b2d0e9a5736343363d06cad7c9745579dcc9c3ea1bdd663056d8c6b0fb"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x58, 0x6, "08c18275c69492687e40cd62a5b72bc055cdc2ec754a4e2f886f382e67b198810352674955feda3aee2c602dcd7666f9279136a9d0c96e00a962eccb27a0f8d585092dd3a1c0814a451440e4a95616de2f36efef"}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x80004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34f3ff00110065000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000a002200a876b9a70d3a000008002e0000000000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x20000000) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000440)=@sco, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=[{0x78, 0x119, 0xac1c, "6dfeafe8ed45d456cd28124e29d8f146c575b3f8d50311a75c8e2faf046f4adace314013999c6cfbb7f20c83512a1203241baa8dbeb8b373da6a221c46e3b5319caf162e6a74099e66656d6808d6522480e50580f0a01b34ab7326598658f51133d33b0397feb2d2"}], 0x78}, 0x20004010) [ 255.551976][ T5570] usb 6-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=e2.32 [ 255.575955][ T5570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:53:58 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) write(r1, &(0x7f0000000000)="2069c02b22dc5bebed93b06bd3cf4309ed436261e663a0bc4a", 0x19) [ 255.633812][ T5570] usb 6-1: config 0 descriptor?? [ 255.694576][ T5570] gspca_main: spca508-2.14.0 probing 0130:0130 12:53:58 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0xf40) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 255.762729][ T8079] loop7: detected capacity change from 0 to 8 [ 255.772757][ T5569] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.901661][ T5570] gspca_spca508: reg_read err -71 [ 255.921733][ T5570] gspca_spca508: reg_read err -71 [ 255.941833][ T5570] gspca_spca508: reg_read err -71 [ 255.961650][ T5570] gspca_spca508: reg_read err -71 [ 255.981932][ T5570] gspca_spca508: reg_read err -71 [ 256.011729][ T5570] gspca_spca508: reg write: error -71 [ 256.023517][ T8075] fs-verity (sda1, inode 1135): Malformed file signature [ 256.034154][ T5570] spca508: probe of 6-1:0.0 failed with error -71 [ 256.070531][ T5570] usb 6-1: USB disconnect, device number 12 [ 256.174381][ T8081] fs-verity (sda1, inode 1135): Malformed file signature [ 256.311913][ T5569] usb 1-1: New USB device found, idVendor=0421, idProduct=1144, bcdDevice=f9.b9 [ 256.335583][ T5569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.368074][ T5569] usb 1-1: Product: syz [ 256.379326][ T5569] usb 1-1: Manufacturer: syz [ 256.389908][ T5569] usb 1-1: SerialNumber: syz [ 256.414668][ T5569] usb 1-1: config 0 descriptor?? 12:53:59 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x6a, 0xcd, 0xd6, 0x40, 0x130, 0x130, 0xe232, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x33, 0x1b, 0x8e}}]}}]}}, 0x0) 12:53:59 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0xf40) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 12:53:59 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:53:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) dup(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x1, 0x0, 0x3, 0x9}, ["", "", ""]}, 0xc}, 0x1, 0x0, 0x0, 0x14080}, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000200)={0x8, 0x8000009e, 0x3f}) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x6, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x636bfca178697ed3, 0x0, 0x4e24}, 0x6e) 12:53:59 executing program 4: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x24000) [ 256.462586][ T5569] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 256.706987][ T1134] usb 1-1: USB disconnect, device number 10 [ 256.851647][ T5570] usb 6-1: new high-speed USB device number 13 using dummy_hcd 12:54:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4602, 0x7fffffffefff) 12:54:00 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0xf40) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 12:54:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 12:54:00 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0x37, 0x1, 0x40, 0x421, 0x1144, 0xf9b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfe, 0xfb}}]}}]}}, 0x0) [ 257.221791][ T5570] usb 6-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=e2.32 12:54:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 12:54:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4602, 0x7fffffffefff) [ 257.273756][ T5570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:00 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0xf40) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 257.354400][ T5570] usb 6-1: config 0 descriptor?? [ 257.423850][ T5570] gspca_main: spca508-2.14.0 probing 0130:0130 [ 257.571634][ T1134] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 257.632281][ T5570] gspca_spca508: reg_read err -71 [ 257.651727][ T5570] gspca_spca508: reg_read err -71 [ 257.671880][ T5570] gspca_spca508: reg_read err -71 [ 257.691697][ T5570] gspca_spca508: reg_read err -71 [ 257.712114][ T5570] gspca_spca508: reg_read err -71 [ 257.731723][ T5570] gspca_spca508: reg write: error -71 [ 257.737546][ T5570] spca508: probe of 6-1:0.0 failed with error -71 [ 257.756438][ T5570] usb 6-1: USB disconnect, device number 13 12:54:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 12:54:01 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4602, 0x7fffffffefff) 12:54:01 executing program 3: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x270f, &(0x7f00000001c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 12:54:01 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x126) [ 258.151759][ T1134] usb 1-1: New USB device found, idVendor=0421, idProduct=1144, bcdDevice=f9.b9 [ 258.160957][ T1134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.169387][ T1134] usb 1-1: Product: syz [ 258.173817][ T1134] usb 1-1: Manufacturer: syz [ 258.178580][ T1134] usb 1-1: SerialNumber: syz 12:54:01 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4602, 0x7fffffffefff) 12:54:01 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x126) [ 258.216078][ T1134] usb 1-1: config 0 descriptor?? 12:54:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 12:54:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0xca2) [ 258.272741][ T1134] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 258.495822][ T5570] usb 1-1: USB disconnect, device number 11 12:54:02 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x126) 12:54:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc04c6100, &(0x7f0000000040)) 12:54:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 12:54:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) 12:54:02 executing program 3: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x270f, &(0x7f00000001c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 12:54:02 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x126) 12:54:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc04c6100, &(0x7f0000000040)) 12:54:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) 12:54:02 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000500)=""/163, &(0x7f00000005c0)=[0x0], 0x1}, 0x58) 12:54:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc04c6100, &(0x7f0000000040)) 12:54:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) 12:54:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = epoll_create(0x1e1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x20000000}) 12:54:02 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc04c6100, &(0x7f0000000040)) 12:54:02 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 12:54:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) [ 259.325535][ T8157] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.457625][ T8157] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.592396][ T8157] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:03 executing program 3: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x270f, &(0x7f00000001c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 12:54:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = epoll_create(0x1e1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x20000000}) 12:54:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) 12:54:03 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 12:54:03 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043edc0d03000000aaaaaaaaaa1100b6800043b8948ad40cffb4fbf2424e075e32d91fdb0d42a332c1d9b08fe9251576c5af502eadb1bf64df9f373d90b122924992fba2928043701378d6583a453b3a2fc838563de71b00000000000000000006"], 0xdf) 12:54:03 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:03 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 12:54:03 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043edc0d03000000aaaaaaaaaa1100b6800043b8948ad40cffb4fbf2424e075e32d91fdb0d42a332c1d9b08fe9251576c5af502eadb1bf64df9f373d90b122924992fba2928043701378d6583a453b3a2fc838563de71b00000000000000000006"], 0xdf) 12:54:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = epoll_create(0x1e1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x20000000}) [ 260.019205][ T8174] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) 12:54:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) 12:54:03 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r1 = epoll_create(0x1e1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x20000000}) [ 260.035726][ T3638] Bluetooth: hci0: Unknown advertising packet type: 0x600 [ 260.140270][ T3638] Bluetooth: hci0: Unknown advertising packet type: 0x600 [ 260.244913][ T8174] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.374879][ T8174] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:04 executing program 3: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x270f, &(0x7f00000001c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 12:54:04 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043edc0d03000000aaaaaaaaaa1100b6800043b8948ad40cffb4fbf2424e075e32d91fdb0d42a332c1d9b08fe9251576c5af502eadb1bf64df9f373d90b122924992fba2928043701378d6583a453b3a2fc838563de71b00000000000000000006"], 0xdf) 12:54:04 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 12:54:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) 12:54:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) 12:54:04 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:04 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043edc0d03000000aaaaaaaaaa1100b6800043b8948ad40cffb4fbf2424e075e32d91fdb0d42a332c1d9b08fe9251576c5af502eadb1bf64df9f373d90b122924992fba2928043701378d6583a453b3a2fc838563de71b00000000000000000006"], 0xdf) 12:54:04 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) [ 260.959122][ T3638] Bluetooth: hci0: Unknown advertising packet type: 0x600 [ 260.970638][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5aa4a775, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000140), 0x0) 12:54:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x30}}, 0x0) 12:54:04 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) [ 261.040845][ T3638] Bluetooth: hci0: Unknown advertising packet type: 0x600 [ 261.095696][ T8222] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.195038][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.222018][ T8222] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 12:54:05 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x30}}, 0x0) 12:54:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:54:05 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:54:05 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x30}}, 0x0) 12:54:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x30}}, 0x0) 12:54:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:54:05 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:54:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 262.127206][ T8269] hub 9-0:1.0: USB hub found [ 262.134539][ T8269] hub 9-0:1.0: 8 ports detected 12:54:05 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:54:05 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sched_getparam(0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0x6}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000070000000090a0104000000000000000001af152660ae0000000000000000000900020073797a31000000000900010073797a3000000000080005400000002134002180060001007061796c6f6164002400028008000140000000000100000000000000080003400000000008000440000000009c0000001000010000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003500), 0x301300, 0x0) 12:54:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 12:54:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:54:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 12:54:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454e2, &(0x7f0000000000)) 12:54:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 262.803589][ T8295] tap0: tun_chr_ioctl cmd 1074025698 12:54:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 12:54:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 12:54:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454e2, &(0x7f0000000000)) 12:54:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 12:54:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 263.126853][ T8323] tap0: tun_chr_ioctl cmd 1074025698 12:54:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 12:54:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454e2, &(0x7f0000000000)) 12:54:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 12:54:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 12:54:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:09 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:09 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454e2, &(0x7f0000000000)) 12:54:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 265.845083][ T8354] tap0: tun_chr_ioctl cmd 1074025698 12:54:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000640)=ANY=[], 0x88) sendfile(r2, r2, &(0x7f0000000240), 0x7ffc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) [ 266.026672][ T8374] hub 9-0:1.0: USB hub found [ 266.047550][ T8374] hub 9-0:1.0: 8 ports detected 12:54:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000640)=ANY=[], 0x88) sendfile(r2, r2, &(0x7f0000000240), 0x7ffc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 12:54:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 270.297426][ T8396] hub 9-0:1.0: USB hub found [ 270.316661][ T8396] hub 9-0:1.0: 8 ports detected 12:54:15 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000640)=ANY=[], 0x88) sendfile(r2, r2, &(0x7f0000000240), 0x7ffc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 12:54:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="7a03b78ed54457b73136e9d4563b131b17d94589130e5f1e69282fad3c9cf838a33d50076c0dfad98ab0683b3d31ac23ac272774bd6580063e3f99807a547bcbeb262f8d04a3dc18a89a98796e26c1c687f40144e2343e03a4a888d043f3ed1006fe53375bceae88015e642ec8a92c6cbdcc1ec21a430e36c1e67019c7671cfd33225dcba70750ff73f1039cc0c931201bdfd98e5b5da03b87cee2bd686381404a4970e9c108063e681fdaffa7b6b3550ee1dcfa7fda74949e0c5efd28b40ade3820527b9037b891481b2b833a3245501991ee873c6fe3580f8c8ebed2ad1832dd4101a97d0697876ba4bd816dec6b0bf8a0ff0e908f5545bdcb", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:16 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @sack_perm, @window, @sack_perm, @window, @sack_perm], 0x8) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="b571899e806add7781de5697622bbc7eab8d079b1f0a4a53a1e142fb1eef7a26", 0x20}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000240)="87f57dfcba8974158a0894ebb50d853189acc0a400cde3616686857ddcc8", 0x1e}, {&(0x7f0000000680)="5852e0b2d0ce6e5764d138a78c9964db39387e9890fd447b2eaed7c369b43077052ae32280ef6592a951a196f208db4ca30eaef6df290cc7ba3c112126898862a51d17be6b28dbcc6f00706aa97c40fd3e330a0e805910ddd16828bf8fbe1e1d9c506e9beb860ee2b3a77d1092e54abe1ad625083e3c3f90c4ce2fa7bcef0a7a64a3081431f72e448ea69132d70b6814ffcf01ca26fc761df56abb6619fdd67e1c5c5ef24dd5d2a3", 0xa8}, {&(0x7f0000000740)="771d94055a526b4c45b2806eeec3257995656ef23754aa61ef127020ca166f276f1b451b909e2b76e7d0bdf1d112315642fd07a91f5661c4ea", 0x39}], 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 12:54:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 12:54:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000640)=ANY=[], 0x88) sendfile(r2, r2, &(0x7f0000000240), 0x7ffc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 12:54:22 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:22 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a30c000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) 12:54:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 12:54:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 12:54:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) [ 279.451686][ T5715] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 279.500178][ T8474] hub 9-0:1.0: USB hub found [ 279.518095][ T8474] hub 9-0:1.0: 8 ports detected 12:54:22 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\xfd=\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdd\x00\x00\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xc5R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13\xddC\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u\xff\x00\x00\x00\x00\x00\x00\x00\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8\xab\xb2\x8e\x8e\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2404e45015c7b600d9a1b88b62f18e171472312fc4b6878e2736f9130e4b2c16c201a8d98c0aabf64b1718277c86c7edadfee7229a0d23cb78ed81038d5ef3412e5f8ad425d7acec1b997d01a7f1f60dbf34d1da5fe7959ad4710b63f106457b4d62f88819fac8eadfd1e1387eca538cbc8d5908b78d1cc54435d003591215d950113501e8f2aa8c22a1404ca730bc56a8c0e4de39061f23c138c6f0275f07e6a5922aa008aa1af10a1cbf3d06", 0xad}, {&(0x7f00000005c0)="6a1ecf3b26094a6b84b35c726f987448d3a92a0bc35f554fa308a8a44245ab801ee8963de860745838e8bd1173a146734984ba1ffd33c13cf0f06e4d56f4706bb2fdd1a0d0bea50130dd7aa61ef2ae4e58c6bb8330", 0x55}], 0x2, 0x3, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:54:22 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\xfd=\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdd\x00\x00\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xc5R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13\xddC\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u\xff\x00\x00\x00\x00\x00\x00\x00\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8\xab\xb2\x8e\x8e\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2404e45015c7b600d9a1b88b62f18e171472312fc4b6878e2736f9130e4b2c16c201a8d98c0aabf64b1718277c86c7edadfee7229a0d23cb78ed81038d5ef3412e5f8ad425d7acec1b997d01a7f1f60dbf34d1da5fe7959ad4710b63f106457b4d62f88819fac8eadfd1e1387eca538cbc8d5908b78d1cc54435d003591215d950113501e8f2aa8c22a1404ca730bc56a8c0e4de39061f23c138c6f0275f07e6a5922aa008aa1af10a1cbf3d06", 0xad}, {&(0x7f00000005c0)="6a1ecf3b26094a6b84b35c726f987448d3a92a0bc35f554fa308a8a44245ab801ee8963de860745838e8bd1173a146734984ba1ffd33c13cf0f06e4d56f4706bb2fdd1a0d0bea50130dd7aa61ef2ae4e58c6bb8330", 0x55}], 0x2, 0x3, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 279.711780][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 279.831896][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.862520][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 12:54:23 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\xfd=\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdd\x00\x00\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xc5R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13\xddC\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u\xff\x00\x00\x00\x00\x00\x00\x00\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8\xab\xb2\x8e\x8e\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2404e45015c7b600d9a1b88b62f18e171472312fc4b6878e2736f9130e4b2c16c201a8d98c0aabf64b1718277c86c7edadfee7229a0d23cb78ed81038d5ef3412e5f8ad425d7acec1b997d01a7f1f60dbf34d1da5fe7959ad4710b63f106457b4d62f88819fac8eadfd1e1387eca538cbc8d5908b78d1cc54435d003591215d950113501e8f2aa8c22a1404ca730bc56a8c0e4de39061f23c138c6f0275f07e6a5922aa008aa1af10a1cbf3d06", 0xad}, {&(0x7f00000005c0)="6a1ecf3b26094a6b84b35c726f987448d3a92a0bc35f554fa308a8a44245ab801ee8963de860745838e8bd1173a146734984ba1ffd33c13cf0f06e4d56f4706bb2fdd1a0d0bea50130dd7aa61ef2ae4e58c6bb8330", 0x55}], 0x2, 0x3, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 279.917403][ T5715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 280.019042][ T5715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.065651][ T5715] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.103229][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.144072][ T5715] usb 1-1: config 0 descriptor?? [ 280.411826][ T5715] usb 1-1: GET_CAPABILITIES returned 0 [ 280.417403][ T5715] usbtmc 1-1:0.0: can't read capabilities [ 280.617734][ T3676] usb 1-1: USB disconnect, device number 12 12:54:27 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:27 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\xfd=\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdd\x00\x00\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xc5R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13\xddC\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u\xff\x00\x00\x00\x00\x00\x00\x00\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8\xab\xb2\x8e\x8e\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pwritev(r0, &(0x7f00000015c0)=[{&(0x7f0000000040)="2404e45015c7b600d9a1b88b62f18e171472312fc4b6878e2736f9130e4b2c16c201a8d98c0aabf64b1718277c86c7edadfee7229a0d23cb78ed81038d5ef3412e5f8ad425d7acec1b997d01a7f1f60dbf34d1da5fe7959ad4710b63f106457b4d62f88819fac8eadfd1e1387eca538cbc8d5908b78d1cc54435d003591215d950113501e8f2aa8c22a1404ca730bc56a8c0e4de39061f23c138c6f0275f07e6a5922aa008aa1af10a1cbf3d06", 0xad}, {&(0x7f00000005c0)="6a1ecf3b26094a6b84b35c726f987448d3a92a0bc35f554fa308a8a44245ab801ee8963de860745838e8bd1173a146734984ba1ffd33c13cf0f06e4d56f4706bb2fdd1a0d0bea50130dd7aa61ef2ae4e58c6bb8330", 0x55}], 0x2, 0x3, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:54:27 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:27 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0xf42}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:54:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 12:54:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000000e440)={@multicast2, @remote, 0x0, 0x2}, 0x10) 12:54:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 12:54:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000000e440)={@multicast2, @remote, 0x0, 0x2}, 0x10) 12:54:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 12:54:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000000e440)={@multicast2, @remote, 0x0, 0x2}, 0x10) 12:54:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 12:54:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 284.371725][ T5569] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 284.401661][ T5572] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 284.631753][ T5569] usb 1-1: Using ep0 maxpacket: 8 [ 284.701708][ T5572] usb 2-1: Using ep0 maxpacket: 8 [ 284.772029][ T5569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.788620][ T5569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.805154][ T5569] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.819908][ T5569] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.830977][ T5569] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.840677][ T5572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.851737][ T5569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.859796][ T5572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.872047][ T5572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.882940][ T5569] usb 1-1: config 0 descriptor?? [ 284.890564][ T5572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.900489][ T5572] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.909678][ T5572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.926580][ T5572] usb 2-1: config 0 descriptor?? [ 285.141719][ T5569] usb 1-1: GET_CAPABILITIES returned 0 [ 285.147286][ T5569] usbtmc 1-1:0.0: can't read capabilities [ 285.191757][ T5572] usb 2-1: GET_CAPABILITIES returned 0 [ 285.197282][ T5572] usbtmc 2-1:0.0: can't read capabilities [ 285.359343][ T1134] usb 1-1: USB disconnect, device number 13 [ 285.412781][ T3676] usb 2-1: USB disconnect, device number 2 12:54:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 12:54:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000000e440)={@multicast2, @remote, 0x0, 0x2}, 0x10) 12:54:29 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x7, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 12:54:29 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0xf42}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:54:29 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:29 executing program 4: unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/129) 12:54:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x5}]}}}]}, 0x44}}, 0x0) 12:54:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x3, "c45c23"}, 0x0, 0x0}) 12:54:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x5}]}}}]}, 0x44}}, 0x0) 12:54:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x5}]}}}]}, 0x44}}, 0x0) 12:54:29 executing program 4: unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/129) 12:54:29 executing program 4: unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/129) 12:54:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x5}]}}}]}, 0x44}}, 0x0) [ 286.241742][ T5569] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 286.292171][ T5572] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 286.321801][ T1134] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 286.511726][ T5569] usb 1-1: Using ep0 maxpacket: 8 [ 286.551717][ T5572] usb 2-1: Using ep0 maxpacket: 8 [ 286.651987][ T5569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.662961][ T5569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 286.674601][ T5569] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 286.684812][ T5569] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.695108][ T5572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.701754][ T1134] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 286.706056][ T5569] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.722122][ T1134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.724734][ T5572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 286.744441][ T1134] usb 3-1: config 0 descriptor?? [ 286.746138][ T5569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.757614][ T5572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 286.768175][ T5572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.781383][ T5569] usb 1-1: config 0 descriptor?? [ 286.786540][ T5572] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.795969][ T5572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.807564][ T5572] usb 2-1: config 0 descriptor?? [ 287.031700][ T5569] usb 1-1: GET_CAPABILITIES returned 0 [ 287.037321][ T5569] usbtmc 1-1:0.0: can't read capabilities [ 287.071753][ T5572] usb 2-1: GET_CAPABILITIES returned 0 [ 287.077413][ T5572] usbtmc 2-1:0.0: can't read capabilities [ 287.248469][ T5572] usb 1-1: USB disconnect, device number 14 [ 287.262084][ T1134] usb 3-1: Firmware: major: 196, minor: 92, hardware type: UNKNOWN (35) [ 287.285292][ T3676] usb 2-1: USB disconnect, device number 3 [ 287.491801][ T1134] usb 3-1: failed to fetch extended address, random address set [ 287.499602][ T1134] usb 3-1: atusb_probe: initialization failed, error = -524 [ 287.508052][ T1134] atusb: probe of 3-1:0.0 failed with error -524 [ 287.535227][ T1134] usb 3-1: USB disconnect, device number 6 12:54:31 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FICLONE(r0, 0x40049409, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0xb94, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x401}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="966ec2dfe6cd60b32ebf6faf8cf721a594ea9ab770850e50cadb051a73ff47732c8f0e1275db03911e7dfe47510ca7a1ce01f2f381ee0f02e22415deb2c1c9d3cf17feab8f4d8a39c3b13763"], 0xfffffd9d) dup(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) 12:54:31 executing program 4: unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/129) 12:54:31 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0xf42}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:54:31 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 12:54:31 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:54:31 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x7) 12:54:31 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x7) 12:54:31 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x7) [ 288.091636][ T1134] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 288.121764][ T3676] usb 2-1: new high-speed USB device number 4 using dummy_hcd 12:54:31 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x7) [ 288.231627][ T5715] usb 5-1: new high-speed USB device number 10 using dummy_hcd 12:54:31 executing program 2: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) [ 288.331967][ T1134] usb 1-1: Using ep0 maxpacket: 8 [ 288.351008][ T8584] syz-executor.2: epoll_ctl support in io_uring is deprecated and will be removed in a future Linux kernel version. [ 288.371814][ T3676] usb 2-1: Using ep0 maxpacket: 8 12:54:31 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0xf42}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 288.451888][ T1134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.465725][ T1134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 288.481869][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 288.497159][ T1134] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.507677][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.531920][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 288.548868][ T1134] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.566981][ T3676] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.586429][ T1134] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.601738][ T5715] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.609775][ T5715] usb 5-1: config 0 has no interface number 0 [ 288.624945][ T3676] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.638548][ T5715] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05 [ 288.649055][ T1134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.665020][ T3676] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.676248][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.687205][ T1134] usb 1-1: config 0 descriptor?? [ 288.704844][ T3676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.714531][ T5715] usb 5-1: config 0 descriptor?? [ 288.729691][ T3676] usb 2-1: config 0 descriptor?? [ 288.754329][ T5715] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 288.951708][ T1134] usb 1-1: GET_CAPABILITIES returned 0 [ 288.957418][ T1134] usbtmc 1-1:0.0: can't read capabilities [ 288.997845][ T3676] usb 2-1: GET_CAPABILITIES returned 0 [ 289.003588][ T3676] usbtmc 2-1:0.0: can't read capabilities [ 289.167990][ T5571] usb 1-1: USB disconnect, device number 15 [ 289.212810][ T1134] usb 2-1: USB disconnect, device number 4 12:54:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000380)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:54:32 executing program 2: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 12:54:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FICLONE(r0, 0x40049409, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0xb94, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x401}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="966ec2dfe6cd60b32ebf6faf8cf721a594ea9ab770850e50cadb051a73ff47732c8f0e1275db03911e7dfe47510ca7a1ce01f2f381ee0f02e22415deb2c1c9d3cf17feab8f4d8a39c3b13763"], 0xfffffd9d) dup(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) 12:54:32 executing program 3: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 12:54:32 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 290.061675][ T5715] gspca_spca1528: reg_w err -71 [ 290.066764][ T5715] spca1528: probe of 5-1:0.1 failed with error -71 [ 290.092738][ T5715] usb 5-1: USB disconnect, device number 10 12:54:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000380)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:54:33 executing program 2: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 12:54:33 executing program 3: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 12:54:33 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 12:54:33 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:54:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000380)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:54:33 executing program 3: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 12:54:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000380)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:54:33 executing program 2: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 12:54:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FICLONE(r0, 0x40049409, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0xb94, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x401}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="966ec2dfe6cd60b32ebf6faf8cf721a594ea9ab770850e50cadb051a73ff47732c8f0e1275db03911e7dfe47510ca7a1ce01f2f381ee0f02e22415deb2c1c9d3cf17feab8f4d8a39c3b13763"], 0xfffffd9d) dup(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) 12:54:34 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 12:54:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) 12:54:34 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x1000, &(0x7f0000000080)) io_setup(0x1, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000140)) io_setup(0x83c2, &(0x7f0000000180)) 12:54:34 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 290.921779][ T5570] usb 5-1: new high-speed USB device number 11 using dummy_hcd 12:54:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) 12:54:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) [ 291.191878][ T5570] usb 5-1: Using ep0 maxpacket: 8 [ 291.322286][ T5570] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.342027][ T5570] usb 5-1: config 0 has no interface number 0 [ 291.349395][ T5570] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05 [ 291.374853][ T5570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.397855][ T5570] usb 5-1: config 0 descriptor?? [ 291.456856][ T5570] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 292.761686][ T5570] gspca_spca1528: reg_w err -71 [ 292.766600][ T5570] spca1528: probe of 5-1:0.1 failed with error -71 [ 292.775699][ T5570] usb 5-1: USB disconnect, device number 11 12:54:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12:54:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) 12:54:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 12:54:36 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 12:54:36 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:54:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FICLONE(r0, 0x40049409, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0xb94, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x401}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="966ec2dfe6cd60b32ebf6faf8cf721a594ea9ab770850e50cadb051a73ff47732c8f0e1275db03911e7dfe47510ca7a1ce01f2f381ee0f02e22415deb2c1c9d3cf17feab8f4d8a39c3b13763"], 0xfffffd9d) dup(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) 12:54:36 executing program 1: socket$kcm(0xa, 0x0, 0x73) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800150000000000060027"], 0x44}}, 0x0) [ 293.571727][ T1134] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 293.611722][ T5572] usb 5-1: new high-speed USB device number 12 using dummy_hcd 12:54:36 executing program 1: socket$kcm(0xa, 0x0, 0x73) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800150000000000060027"], 0x44}}, 0x0) 12:54:36 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 12:54:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1263, 0x0) 12:54:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) [ 293.831639][ T1134] usb 3-1: Using ep0 maxpacket: 16 [ 293.901616][ T5572] usb 5-1: Using ep0 maxpacket: 8 [ 293.952028][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.973917][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.989209][ T1134] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 294.005716][ T1134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.027373][ T1134] usb 3-1: config 0 descriptor?? [ 294.042008][ T5572] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 12:54:37 executing program 1: socket$kcm(0xa, 0x0, 0x73) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800150000000000060027"], 0x44}}, 0x0) [ 294.058514][ T5572] usb 5-1: config 0 has no interface number 0 [ 294.107177][ T5572] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05 [ 294.169632][ T5572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.256039][ T5572] usb 5-1: config 0 descriptor?? [ 294.275861][ T8647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.332631][ T8647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.353134][ T5572] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 294.572480][ T8647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.643704][ T8647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.713928][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0001/input/input16 [ 294.815430][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0001/input/input17 [ 294.941435][ T1134] kye 0003:0458:5019.0001: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 294.989049][ T1134] usb 3-1: USB disconnect, device number 7 12:54:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12:54:38 executing program 1: socket$kcm(0xa, 0x0, 0x73) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800150000000000060027"], 0x44}}, 0x0) 12:54:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) 12:54:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) [ 295.403700][ T8680] __nla_validate_parse: 18 callbacks suppressed [ 295.403719][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.635317][ T5572] gspca_spca1528: reg_w err -71 [ 295.644776][ T5572] spca1528: probe of 5-1:0.1 failed with error -71 [ 295.672783][ T5572] usb 5-1: USB disconnect, device number 12 [ 295.691627][ T1134] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 295.941737][ T1134] usb 3-1: Using ep0 maxpacket: 16 [ 296.061914][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.080056][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.098652][ T1134] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 12:54:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:54:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) 12:54:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12:54:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) 12:54:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) [ 296.107973][ T1134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.122344][ T1134] usb 3-1: config 0 descriptor?? [ 296.222219][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:54:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) [ 296.368023][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.386265][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.421947][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.432062][ T5569] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 296.451830][ T5572] usb 5-1: new high-speed USB device number 13 using dummy_hcd 12:54:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) [ 296.685924][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.701723][ T5569] usb 2-1: Using ep0 maxpacket: 16 [ 296.714468][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.739305][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.747505][ T5572] usb 5-1: Using ep0 maxpacket: 8 [ 296.788425][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0002/input/input18 [ 296.862142][ T5569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.902760][ T5569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.912983][ T5572] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.931920][ T5572] usb 5-1: config 0 has no interface number 0 [ 296.945016][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0002/input/input19 [ 296.996452][ T5572] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05 [ 297.009664][ T5569] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 297.056045][ T1134] kye 0003:0458:5019.0002: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 297.068445][ T5572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.076720][ T5569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.112090][ T5572] usb 5-1: config 0 descriptor?? [ 297.124059][ T5569] usb 2-1: config 0 descriptor?? [ 297.131999][ T1134] usb 3-1: USB disconnect, device number 8 [ 297.218674][ T5572] gspca_main: spca1528-2.14.0 probing 04fc:1528 12:54:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) [ 297.438829][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.461879][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:54:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 12:54:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) 12:54:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 297.638639][ T8721] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 297.713248][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.741170][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.765575][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 297.807070][ T8721] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 297.848370][ T5569] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0003/input/input20 [ 297.901668][ T1134] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 297.935403][ T8726] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 297.971493][ T8726] bond1 (unregistering): Released all slaves [ 297.995241][ T5569] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0003/input/input21 [ 298.069291][ T5569] kye 0003:0458:5019.0003: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 298.151615][ T1134] usb 3-1: Using ep0 maxpacket: 16 [ 298.186140][ T5569] usb 2-1: USB disconnect, device number 5 12:54:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 298.281827][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.345724][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.404171][ T8729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 298.447316][ T1134] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 298.484120][ T1134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.493186][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 298.504559][ T1134] usb 3-1: config 0 descriptor?? [ 298.511137][ T8731] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 298.531780][ T5572] gspca_spca1528: reg_w err -71 [ 298.536751][ T5572] spca1528: probe of 5-1:0.1 failed with error -71 [ 298.559586][ T5572] usb 5-1: USB disconnect, device number 13 [ 298.595849][ T8729] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 298.653273][ T8729] bond1 (unregistering): Released all slaves [ 298.746992][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.766875][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.003864][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.016186][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:54:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12:54:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc0d4, 0x402) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRESDEC]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) 12:54:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 12:54:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 299.047772][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0004/input/input22 12:54:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 299.101817][ T8738] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 299.134331][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0004/input/input23 [ 299.186162][ T8737] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 299.208664][ T1134] kye 0003:0458:5019.0004: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 299.299214][ T1134] usb 3-1: USB disconnect, device number 9 [ 299.340386][ T8742] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 299.351700][ T5715] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 299.469951][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.478340][ T8743] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 299.494196][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 299.503979][ T8744] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 299.519653][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.584202][ T8746] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 299.601738][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 299.661110][ T8748] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 299.708161][ T8748] bond1 (unregistering): Released all slaves [ 299.721956][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.743228][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.778331][ T5715] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 299.804738][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:54:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 299.847284][ T5715] usb 2-1: config 0 descriptor?? [ 299.868128][ T8749] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 299.922273][ T8749] bond4 (unregistering): Released all slaves 12:54:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 12:54:43 executing program 5: r0 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) [ 300.068020][ T8738] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 300.106824][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 12:54:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 12:54:43 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000080)={0x1, 0x0, [{}]}) close_range(r0, 0xffffffffffffffff, 0x0) [ 300.127655][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.148180][ T8738] bond1 (unregistering): Released all slaves 12:54:43 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000080)={0x1, 0x0, [{}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12:54:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 300.207430][ T8760] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 300.216022][ T1134] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 300.281273][ T8762] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 300.362817][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.372574][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.391072][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 300.400493][ T8765] bond1: (slave batadv4): Enslaving as a backup interface with an up link [ 300.435457][ T5715] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0005/input/input24 [ 300.461990][ T1134] usb 3-1: Using ep0 maxpacket: 16 [ 300.467835][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 300.478100][ T8766] bond4: (slave batadv2): Enslaving as a backup interface with an up link [ 300.491409][ T8768] bond1 (unregistering): (slave batadv4): Releasing backup interface [ 300.523547][ T5715] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0005/input/input25 [ 300.532651][ T8768] bond1 (unregistering): Released all slaves [ 300.582020][ T5715] kye 0003:0458:5019.0005: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 300.595227][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.609571][ T1134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.643239][ T1134] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 300.656019][ T5715] usb 2-1: USB disconnect, device number 6 [ 300.668619][ T1134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.691164][ T8770] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 300.716848][ T1134] usb 3-1: config 0 descriptor?? [ 300.831094][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 300.839972][ T8775] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 300.862987][ T8776] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 300.882033][ T8776] bond1 (unregistering): Released all slaves [ 300.992447][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.001092][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:54:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x8c, 0x0, 0xac8, 0x3410, 0x2e90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12:54:44 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000080)={0x1, 0x0, [{}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12:54:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 12:54:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 12:54:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 301.205916][ T8786] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 301.235173][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.262142][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.287537][ T8785] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 301.298298][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0006/input/input26 [ 301.338472][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 301.347292][ T8790] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 301.366595][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 301.374032][ T1134] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0006/input/input27 [ 301.375757][ T8791] bond5: (slave batadv3): Enslaving as a backup interface with an up link [ 301.426481][ T8786] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 301.445589][ T8786] bond1 (unregistering): Released all slaves [ 301.463444][ T8793] bond5 (unregistering): (slave batadv3): Releasing backup interface [ 301.488807][ T1134] kye 0003:0458:5019.0006: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 301.501718][ T3676] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 301.502197][ T8793] bond5 (unregistering): Released all slaves [ 301.551307][ T1134] usb 3-1: USB disconnect, device number 10 [ 301.741926][ T3676] usb 2-1: Using ep0 maxpacket: 16 [ 301.861813][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.873539][ T3676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.883535][ T3676] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 301.892822][ T3676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.903034][ T3676] usb 2-1: config 0 descriptor?? 12:54:45 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000080)={0x1, 0x0, [{}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12:54:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 12:54:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d35ef46b"}}) 12:54:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x7a000000}}], 0x2, 0x0) 12:54:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d35ef46b"}}) 12:54:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000008fc7d9fb42f1a00e", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:54:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) [ 302.152727][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.174106][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.189131][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.233439][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.444834][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.453468][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.490802][ T3676] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0007/input/input28 [ 302.576205][ T3676] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0007/input/input29 [ 302.648299][ T3676] kye 0003:0458:5019.0007: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 302.732392][ T5571] usb 2-1: USB disconnect, device number 7 12:54:46 executing program 5: syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) 12:54:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) 12:54:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d35ef46b"}}) 12:54:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 12:54:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000008fc7d9fb42f1a00e", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:54:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) 12:54:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d35ef46b"}}) 12:54:46 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 303.312142][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.323255][ T8817] binder: 8812:8817 ioctl c0306201 20000100 returned -14 12:54:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) 12:54:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) 12:54:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007a00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r1, r2, 0x0, 0x7) [ 303.443129][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.475553][ T8832] binder: 8829:8832 ioctl c0306201 20000100 returned -14 [ 303.483098][ T8831] binder: 8830:8831 ioctl c0306201 20000100 returned -14 12:54:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) 12:54:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) 12:54:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000008fc7d9fb42f1a00e", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 303.588070][ T8843] binder: BINDER_SET_CONTEXT_MGR already set [ 303.591322][ T8841] binder: 8840:8841 ioctl c0306201 20000100 returned -14 [ 303.612061][ T8843] binder: 8839:8843 ioctl 4018620d 20000000 returned -16 [ 303.625823][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:54:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) [ 303.689692][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 12:54:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000008fc7d9fb42f1a00e", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 303.787903][ T8850] binder: 8848:8850 ioctl c0306201 20000100 returned -14 12:54:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) [ 303.853883][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.943224][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.976638][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:54:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) 12:54:47 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 12:54:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) 12:54:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 12:54:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x3) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 12:54:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007a00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r1, r2, 0x0, 0x7) 12:54:47 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 304.310697][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:54:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) 12:54:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r5 = dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000200)='D'}) 12:54:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x3) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 12:54:47 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 12:54:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x3) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) [ 304.458584][ T8884] binder: 8882:8884 ioctl c0306201 20000100 returned -14 12:54:47 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:48 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x3) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 12:54:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 12:54:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007a00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r1, r2, 0x0, 0x7) 12:54:48 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:48 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:48 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007a00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r1, r2, 0x0, 0x7) 12:54:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:49 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:49 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:49 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c00070fab092509b86807000cab087a02000000b848105b49108364a6625af00305840900600100000000005f9815fa2c53c28648000000b9d95662537a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a36313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000080548deac279cc4848e3825924509260e13429fbe11017d", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:49 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:50 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:50 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="41f9ff01008e4d36428e98a8b780"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x5a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12:54:50 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:50 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 307.256772][ T27] audit: type=1326 audit(1663160090.464:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8765a89409 code=0x0 12:54:50 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 307.306539][ T27] audit: type=1326 audit(1663160090.514:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f8765a3c04b code=0x0 12:54:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000540)=0x401) [ 307.356752][ T27] audit: type=1326 audit(1663160090.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8765a89409 code=0x0 12:54:50 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:54:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000540)=0x401) [ 307.448742][ T27] audit: type=1326 audit(1663160090.624:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f8765a3c04b code=0x0 12:54:50 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 307.553090][ T27] audit: type=1326 audit(1663160090.704:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8765a89409 code=0x0 12:54:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000540)=0x401) 12:54:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 307.648335][ T27] audit: type=1326 audit(1663160090.744:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f8765a3c04b code=0x0 12:54:50 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffffffffffc0}) [ 307.749977][ T27] audit: type=1326 audit(1663160090.824:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8765a89409 code=0x0 [ 307.812002][ T27] audit: type=1326 audit(1663160090.874:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f8765a3c04b code=0x0 12:54:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 12:54:51 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffffffffffc0}) 12:54:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000540)=0x401) 12:54:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='afs_file_error\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x5, 0x6f, 0xff, 0x8, 0x33, 0xc4, 0x31, 0x8, 0x0, 0x7, 0xf9}, 0xe) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:54:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:51 executing program 5: unshare(0x68040600) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 12:54:51 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffffffffffc0}) 12:54:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 12:54:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 12:54:51 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffffffffffc0}) 12:54:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 12:54:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='+%(\x00', &(0x7f0000000280)='./file0\x00', r0) 12:54:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 12:54:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) [ 308.530841][ T9018] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 12:54:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045005, 0x200000000000000) 12:54:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 12:54:51 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 12:54:51 executing program 5: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x4, 0x0, 0x0, "00000001084f3904020309000000000100", "9384bbeb3018ad591b661fe808b21b77", {'\x00', "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 12:54:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 12:54:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) [ 308.571178][ T9018] 8021q: adding VLAN 0 to HW filter on device team0 12:54:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045005, 0x200000000000000) 12:54:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_clone(0x400, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0xe25, 0x8000, 0x6}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) [ 308.634632][ T9018] bond0: (slave team0): Enslaving as an active interface with an up link [ 308.660209][ T9027] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 12:54:51 executing program 5: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x4, 0x0, 0x0, "00000001084f3904020309000000000100", "9384bbeb3018ad591b661fe808b21b77", {'\x00', "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 12:54:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 308.784816][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.797421][ T9027] bond0: (slave team0): Releasing backup interface [ 308.809822][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.831340][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.850896][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.876099][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.887730][ T9027] bridge0: port 3(team0) entered blocking state [ 308.912262][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.926158][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 308.932980][ T9027] bridge0: port 3(team0) entered disabled state [ 308.955077][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.023660][ T9027] device team0 entered promiscuous mode [ 309.031156][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.044712][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.057472][ T9027] device team_slave_0 entered promiscuous mode [ 309.059625][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.076178][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.076412][ T9027] device team_slave_1 entered promiscuous mode [ 309.095155][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.109366][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.123679][ T9042] __nla_validate_parse: 2 callbacks suppressed [ 309.123701][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.147805][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.159472][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.168844][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.177481][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.185989][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.194543][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.206803][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.228079][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.247055][ T9042] device bond1 entered promiscuous mode [ 309.259330][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.272124][ T9042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.274261][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.300564][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.331166][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.341330][ T9044] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 309.357896][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.373975][ T9030] syz-executor.4 (9030): drop_caches: 0 12:54:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045005, 0x200000000000000) 12:54:52 executing program 5: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x4, 0x0, 0x0, "00000001084f3904020309000000000100", "9384bbeb3018ad591b661fe808b21b77", {'\x00', "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 12:54:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) [ 309.383689][ T9030] syz-executor.4 (9030): drop_caches: 0 [ 309.393263][ T9044] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 309.406193][ T9030] syz-executor.4 (9030): drop_caches: 0 12:54:52 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 12:54:52 executing program 5: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x4, 0x0, 0x0, "00000001084f3904020309000000000100", "9384bbeb3018ad591b661fe808b21b77", {'\x00', "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 12:54:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 12:54:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045005, 0x200000000000000) 12:54:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 309.570062][ T9055] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 309.618485][ T9055] device team0 left promiscuous mode 12:54:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 309.641731][ T9055] device team_slave_0 left promiscuous mode [ 309.648800][ T9055] device team_slave_1 left promiscuous mode 12:54:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_clone(0x400, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0xe25, 0x8000, 0x6}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) [ 309.685207][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.690001][ T9055] bridge0: port 3(team0) entered disabled state [ 309.702113][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.715735][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.792584][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.805556][ T9055] bond0: (slave team0): Enslaving as an active interface with an up link [ 309.828930][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.854339][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.893628][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.906353][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.933538][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.947586][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.966198][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 309.989148][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.095647][ T9060] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 310.224305][ T9060] bond0: (slave team0): Releasing backup interface [ 310.263068][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.275695][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.288254][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.297373][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.310477][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.321058][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.330151][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.339666][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.350277][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.360351][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.368373][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.378231][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.421061][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.438370][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.449904][ T9060] bridge0: port 3(team0) entered blocking state [ 310.457036][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.464271][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.471213][ T9060] bridge0: port 3(team0) entered disabled state [ 310.480264][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.489853][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.497158][ T9060] device team0 entered promiscuous mode [ 310.508085][ T9064] syz-executor.4 (9064): drop_caches: 0 [ 310.523644][ T9060] device team_slave_0 entered promiscuous mode [ 310.556521][ T9060] device team_slave_1 entered promiscuous mode [ 310.575556][ T9058] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 12:54:53 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 12:54:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_clone(0x400, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0xe25, 0x8000, 0x6}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) [ 310.755988][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.803319][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.815144][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.827174][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.834933][ T9058] bond0: (slave team0): Enslaving as an active interface with an up link [ 310.847234][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.855552][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.865060][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.874699][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.883733][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.892248][ T9083] syz-executor.4 (9083): drop_caches: 0 12:54:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) [ 310.900704][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.923952][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.936696][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.944812][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.956030][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 310.981939][ T9065] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 310.993632][ T9065] bond0: (slave team0): Releasing backup interface [ 311.008223][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.016529][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.027881][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.041772][ T9065] bridge0: port 3(team0) entered blocking state [ 311.052483][ T9065] bridge0: port 3(team0) entered disabled state [ 311.060302][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.070096][ T9065] device team0 entered promiscuous mode [ 311.078998][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.084937][ T9065] device team_slave_0 entered promiscuous mode [ 311.093593][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.104100][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.122098][ T9065] device team_slave_1 entered promiscuous mode [ 311.139323][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) 12:54:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) [ 311.177691][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.208060][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.218927][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.228596][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.240132][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.250346][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.264265][ T9083] syz-executor.4 (9083): drop_caches: 0 12:54:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 311.296808][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.303175][ T9087] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 311.316490][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.343170][ T9083] syz-executor.4 (9083): drop_caches: 0 [ 311.357243][ T9087] device team0 left promiscuous mode [ 311.364254][ T9087] device team_slave_0 left promiscuous mode [ 311.384260][ T9087] device team_slave_1 left promiscuous mode [ 311.390895][ T9087] bridge0: port 3(team0) entered disabled state [ 311.446933][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.498860][ T9087] bond0: (slave team0): Enslaving as an active interface with an up link [ 311.509994][ T9089] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 311.609293][ T9089] bond0: (slave team0): Releasing backup interface 12:54:54 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 12:54:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_clone(0x400, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0xe25, 0x8000, 0x6}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) [ 311.741291][ T9089] bridge0: port 3(team0) entered blocking state [ 311.751053][ T9089] bridge0: port 3(team0) entered disabled state [ 311.777704][ T9089] device team0 entered promiscuous mode [ 311.900121][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 311.916600][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 311.931332][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 311.969204][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 311.969387][ T9089] device team_slave_0 entered promiscuous mode [ 311.996301][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.009131][ T9089] device team_slave_1 entered promiscuous mode [ 312.016277][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.050687][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.079418][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.092479][ T9094] device bond1 entered promiscuous mode [ 312.106923][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.122214][ T9094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.144619][ T9097] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 312.154514][ T9097] device team0 left promiscuous mode [ 312.160038][ T9097] device team_slave_0 left promiscuous mode [ 312.181777][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.190220][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.207817][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.217006][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.227030][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.235860][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.243757][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.256744][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.267693][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.277278][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.286686][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.294989][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.304986][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.313642][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.322202][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.330585][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.338878][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.347181][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.355072][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.368976][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.378620][ T9107] syz-executor.4 (9107): drop_caches: 0 [ 312.386822][ T9107] syz-executor.4 (9107): drop_caches: 0 12:54:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) [ 312.422695][ T9097] device team_slave_1 left promiscuous mode [ 312.429735][ T9097] bridge0: port 3(team0) entered disabled state [ 312.487467][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.558164][ T9097] bond0: (slave team0): Enslaving as an active interface with an up link [ 312.570837][ T9098] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 312.602931][ T9098] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 312.690798][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.705862][ T9099] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 312.736277][ T9099] bond0: (slave team0): Releasing backup interface 12:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) 12:54:56 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000006d80), &(0x7f0000006dc0)={0x0, 0x3938700}, &(0x7f0000006e40)={0x0}) [ 312.799598][ T9099] bridge0: port 3(team0) entered blocking state [ 312.854587][ T9099] bridge0: port 3(team0) entered disabled state [ 312.876853][ T9099] device team0 entered promiscuous mode [ 312.891644][ T9099] device team_slave_0 entered promiscuous mode 12:54:56 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x0, 0xf8, 0x92, 0xfd, 0x8, 0x3340, 0x43a, 0x3bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xed, 0x37}}]}}]}}, 0x0) 12:54:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 312.908228][ T9099] device team_slave_1 entered promiscuous mode 12:54:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000050) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 12:54:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 312.978023][ T9113] device team0 left promiscuous mode [ 312.984895][ T9113] device team_slave_0 left promiscuous mode [ 313.012041][ T9113] device team_slave_1 left promiscuous mode [ 313.035990][ T9113] bridge0: port 3(team0) entered disabled state [ 313.097988][ T9113] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.110416][ T9113] bond0: (slave team0): Enslaving as an active interface with an up link [ 313.124547][ T9114] bond0: (slave team0): Releasing backup interface [ 313.151048][ T9114] bridge0: port 3(team0) entered blocking state [ 313.159044][ T9114] bridge0: port 3(team0) entered disabled state [ 313.187196][ T9114] device team0 entered promiscuous mode [ 313.193418][ T9114] device team_slave_0 entered promiscuous mode [ 313.209431][ T9114] device team_slave_1 entered promiscuous mode [ 313.221057][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.240681][ T3681] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 313.302268][ T9120] device bond5 entered promiscuous mode [ 313.320056][ T9120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.356402][ T9121] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 313.388917][ T9121] bond5: (slave ip6gre1): Error -95 calling set_mac_address [ 313.489090][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.498904][ T3681] usb 4-1: Using ep0 maxpacket: 8 [ 313.569822][ T9126] device bond2 entered promiscuous mode 12:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) [ 313.612542][ T9126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.675753][ T9129] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 313.687603][ T9129] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 313.750241][ T9128] validate_nla: 2 callbacks suppressed [ 313.750292][ T9128] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 313.781820][ T3681] usb 4-1: New USB device found, idVendor=3340, idProduct=043a, bcdDevice=3b.be [ 313.791173][ T3681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.802490][ T3681] usb 4-1: Product: syz [ 313.809871][ T3681] usb 4-1: Manufacturer: syz [ 313.819157][ T3681] usb 4-1: SerialNumber: syz [ 313.835864][ T9128] device team0 left promiscuous mode [ 313.860133][ T3681] usb 4-1: config 0 descriptor?? [ 313.889935][ T9128] device team_slave_0 left promiscuous mode [ 313.897659][ T9128] device team_slave_1 left promiscuous mode [ 313.923689][ T9128] bridge0: port 3(team0) entered disabled state [ 313.948336][ T9128] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.967143][ T9128] bond0: (slave team0): Enslaving as an active interface with an up link [ 313.976203][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.000780][ T9133] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 314.028018][ T9133] bond0: (slave team0): Releasing backup interface [ 314.077566][ T9133] bridge0: port 3(team0) entered blocking state [ 314.088255][ T9133] bridge0: port 3(team0) entered disabled state [ 314.099357][ T9133] device team0 entered promiscuous mode [ 314.105982][ T9133] device team_slave_0 entered promiscuous mode [ 314.118193][ T5713] usb 4-1: USB disconnect, device number 6 [ 314.128549][ T9133] device team_slave_1 entered promiscuous mode [ 314.164122][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:54:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x10}}, 0x1c}}, 0x0) 12:54:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x10}}, 0x1c}}, 0x0) 12:54:57 executing program 5: r0 = syz_io_uring_setup(0x48fc, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x17, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 12:54:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x0, 0x0, 0x30314142}}) 12:54:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 314.248725][ T9140] device bond6 entered promiscuous mode [ 314.268818][ T9140] 8021q: adding VLAN 0 to HW filter on device bond6 12:54:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x10}}, 0x1c}}, 0x0) 12:54:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x0, 0x0, 0x30314142}}) [ 314.342553][ T9141] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 314.387694][ T9141] bond6: (slave ip6gre1): Error -95 calling set_mac_address 12:54:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x10}}, 0x1c}}, 0x0) 12:54:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x0, 0x0, 0x30314142}}) 12:54:57 executing program 5: r0 = syz_io_uring_setup(0x48fc, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x17, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 12:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000800000000000020850000002c0000e99400000000000000c66d81d85eec3a2e6649445d9c6746"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r4, 0x6840, 0x43b0}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2deee4879f3943181ba39cddba7f2f67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05abf9ee71ba2a5a44e62ee3f102a0a2"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc7}, @IFLA_PORT_PROFILE={0x7, 0x2, '$[\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x3421}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x80) 12:54:57 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x0, 0xf8, 0x92, 0xfd, 0x8, 0x3340, 0x43a, 0x3bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xed, 0x37}}]}}]}}, 0x0) 12:54:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x0, 0x0, 0x30314142}}) 12:54:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xa, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0xc8}}, 0x0) [ 314.690493][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:54:57 executing program 5: r0 = syz_io_uring_setup(0x48fc, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x17, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 12:54:58 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) [ 314.832581][ T9167] device bond7 entered promiscuous mode [ 314.879483][ T9167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.900340][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.985648][ T9169] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 315.070600][ T9169] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 315.101695][ T3676] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 315.181767][ T5570] usb 1-1: new high-speed USB device number 16 using dummy_hcd 12:54:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 12:54:58 executing program 5: r0 = syz_io_uring_setup(0x48fc, &(0x7f0000000180), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x17, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 12:54:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xa, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0xc8}}, 0x0) 12:54:58 executing program 5: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x300}}], 0x40000000000002e, 0x0, 0x0) [ 315.267888][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:58 executing program 5: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x300}}], 0x40000000000002e, 0x0, 0x0) [ 315.361742][ T3676] usb 4-1: Using ep0 maxpacket: 8 12:54:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xa, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0xc8}}, 0x0) [ 315.453012][ T5570] usb 1-1: Using ep0 maxpacket: 16 12:54:58 executing program 5: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x300}}], 0x40000000000002e, 0x0, 0x0) [ 315.497112][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.641947][ T3676] usb 4-1: New USB device found, idVendor=3340, idProduct=043a, bcdDevice=3b.be [ 315.662493][ T3676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.689975][ T3676] usb 4-1: Product: syz [ 315.705634][ T3676] usb 4-1: Manufacturer: syz [ 315.721443][ T3676] usb 4-1: SerialNumber: syz [ 315.767837][ T3676] usb 4-1: config 0 descriptor?? [ 315.805725][ T5570] usb 1-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 315.831748][ T5570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.839875][ T5570] usb 1-1: Product: syz [ 315.844613][ T5570] usb 1-1: Manufacturer: syz [ 315.849408][ T5570] usb 1-1: SerialNumber: syz [ 315.862623][ T5570] usb 1-1: config 0 descriptor?? [ 315.903152][ T5570] sierra 1-1:0.0: Sierra USB modem converter detected [ 316.076893][ T3676] usb 4-1: USB disconnect, device number 7 [ 316.113400][ T5570] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 316.131853][ T5570] usb 1-1: USB disconnect, device number 16 [ 316.144728][ T5570] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 316.153945][ T5570] sierra 1-1:0.0: device disconnected 12:54:59 executing program 5: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x300}}], 0x40000000000002e, 0x0, 0x0) 12:54:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xa, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0xc8}}, 0x0) 12:54:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 12:54:59 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x0, 0xf8, 0x92, 0xfd, 0x8, 0x3340, 0x43a, 0x3bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xed, 0x37}}]}}]}}, 0x0) 12:54:59 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) 12:54:59 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x24, 0x0, 0x0) 12:54:59 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x24, 0x0, 0x0) [ 316.641279][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 12:54:59 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) 12:55:00 executing program 1: r0 = syz_io_uring_setup(0xeb6, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 12:55:00 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x24, 0x0, 0x0) 12:55:00 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x24, 0x0, 0x0) [ 316.836778][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.843297][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 12:55:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:55:00 executing program 1: r0 = syz_io_uring_setup(0xeb6, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 316.961852][ T5713] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 316.971890][ T3681] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 317.041689][ T5570] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 317.071558][ T9221] fs-verity (sda1, inode 1135): Malformed file signature 12:55:00 executing program 1: r0 = syz_io_uring_setup(0xeb6, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 317.201831][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 317.231748][ T3681] usb 1-1: Using ep0 maxpacket: 16 [ 317.322157][ T5570] usb 6-1: Using ep0 maxpacket: 16 [ 317.481860][ T5713] usb 4-1: New USB device found, idVendor=3340, idProduct=043a, bcdDevice=3b.be [ 317.491041][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.499362][ T5713] usb 4-1: Product: syz [ 317.503670][ T5713] usb 4-1: Manufacturer: syz [ 317.508289][ T5713] usb 4-1: SerialNumber: syz [ 317.513667][ T3681] usb 1-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 317.529743][ T5713] usb 4-1: config 0 descriptor?? [ 317.534818][ T3681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.543104][ T3681] usb 1-1: Product: syz [ 317.547276][ T3681] usb 1-1: Manufacturer: syz [ 317.552493][ T3681] usb 1-1: SerialNumber: syz [ 317.566280][ T3681] usb 1-1: config 0 descriptor?? [ 317.602626][ T5570] usb 6-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 317.614009][ T3681] sierra 1-1:0.0: Sierra USB modem converter detected [ 317.616500][ T5570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.651725][ T5570] usb 6-1: Product: syz [ 317.667853][ T5570] usb 6-1: Manufacturer: syz [ 317.680603][ T5570] usb 6-1: SerialNumber: syz [ 317.705812][ T5570] usb 6-1: config 0 descriptor?? 12:55:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 317.773854][ T5570] sierra 6-1:0.0: Sierra USB modem converter detected [ 317.833098][ T5571] usb 4-1: USB disconnect, device number 8 [ 317.833581][ T3681] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 317.886954][ T3681] usb 1-1: USB disconnect, device number 17 [ 317.913236][ T3681] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 317.929121][ T3681] sierra 1-1:0.0: device disconnected [ 317.982653][ T5570] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 318.016239][ T5570] usb 6-1: USB disconnect, device number 14 [ 318.040056][ T5570] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 318.062426][ T5570] sierra 6-1:0.0: device disconnected 12:55:01 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x0, 0xf8, 0x92, 0xfd, 0x8, 0x3340, 0x43a, 0x3bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xed, 0x37}}]}}]}}, 0x0) 12:55:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:55:01 executing program 1: r0 = syz_io_uring_setup(0xeb6, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 12:55:01 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) 12:55:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 318.526264][ T9237] fs-verity (sda1, inode 1135): Malformed file signature 12:55:01 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) [ 318.651676][ T3681] usb 4-1: new high-speed USB device number 9 using dummy_hcd 12:55:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 318.761767][ T5713] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 318.762664][ T9245] fs-verity (sda1, inode 1135): Malformed file signature 12:55:02 executing program 2: r0 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12:55:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:55:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) [ 318.901600][ T3676] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 318.911778][ T3681] usb 4-1: Using ep0 maxpacket: 8 12:55:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:55:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) [ 319.011903][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 319.017287][ T9255] fs-verity (sda1, inode 1135): Malformed file signature [ 319.172529][ T3676] usb 6-1: Using ep0 maxpacket: 16 [ 319.192219][ T3681] usb 4-1: New USB device found, idVendor=3340, idProduct=043a, bcdDevice=3b.be [ 319.201333][ T3681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.209722][ T3681] usb 4-1: Product: syz [ 319.214849][ T3681] usb 4-1: Manufacturer: syz [ 319.219475][ T3681] usb 4-1: SerialNumber: syz [ 319.236260][ T3681] usb 4-1: config 0 descriptor?? [ 319.291996][ T5713] usb 1-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 319.301244][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.309772][ T5713] usb 1-1: Product: syz [ 319.314578][ T5713] usb 1-1: Manufacturer: syz [ 319.319289][ T5713] usb 1-1: SerialNumber: syz [ 319.333547][ T5713] usb 1-1: config 0 descriptor?? [ 319.373567][ T5713] sierra 1-1:0.0: Sierra USB modem converter detected [ 319.452562][ T3676] usb 6-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 319.462049][ T3676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.470174][ T3676] usb 6-1: Product: syz [ 319.475227][ T3676] usb 6-1: Manufacturer: syz [ 319.480001][ T3676] usb 6-1: SerialNumber: syz [ 319.494613][ T3676] usb 6-1: config 0 descriptor?? [ 319.520016][ T3681] usb 4-1: USB disconnect, device number 9 [ 319.535900][ T3676] sierra 6-1:0.0: Sierra USB modem converter detected [ 319.593352][ T5713] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 319.603139][ T5713] usb 1-1: USB disconnect, device number 18 [ 319.612388][ T5713] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 319.621493][ T5713] sierra 1-1:0.0: device disconnected [ 319.745151][ T3676] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 319.763312][ T3676] usb 6-1: USB disconnect, device number 15 [ 319.784714][ T3676] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 319.796500][ T3676] sierra 6-1:0.0: device disconnected 12:55:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 12:55:03 executing program 4: r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd3, 0x0, 0x0) 12:55:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1, 0x9a}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2099, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12:55:03 executing program 4: r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd3, 0x0, 0x0) 12:55:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540b, &(0x7f0000001ac0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 320.095230][ T9268] fs-verity (sda1, inode 1135): Malformed file signature 12:55:03 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) 12:55:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 12:55:03 executing program 4: r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd3, 0x0, 0x0) 12:55:03 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x36, 0x11, 0x12, 0x10, 0x1199, 0x683c, 0x355e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x32, 0x4c, 0xc6}}]}}]}}, 0x0) 12:55:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540b, &(0x7f0000001ac0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:55:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xf, 0x6, 0x3}, 0x14}}, 0x0) 12:55:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xf, 0x6, 0x3}, 0x14}}, 0x0) 12:55:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540b, &(0x7f0000001ac0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:55:03 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:03 executing program 4: r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd3, 0x0, 0x0) 12:55:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xf, 0x6, 0x3}, 0x14}}, 0x0) 12:55:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000080)) [ 320.561808][ T3676] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 320.621686][ T5713] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 320.811686][ T3676] usb 1-1: Using ep0 maxpacket: 16 [ 320.871865][ T5713] usb 6-1: Using ep0 maxpacket: 16 [ 321.091925][ T3676] usb 1-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 321.109156][ T3676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.133583][ T3676] usb 1-1: Product: syz [ 321.146154][ T3676] usb 1-1: Manufacturer: syz [ 321.151907][ T5713] usb 6-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=35.5e [ 321.168144][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.177588][ T3676] usb 1-1: SerialNumber: syz [ 321.193130][ T3676] usb 1-1: config 0 descriptor?? [ 321.200867][ T5713] usb 6-1: Product: syz [ 321.214776][ T5713] usb 6-1: Manufacturer: syz [ 321.226180][ T5713] usb 6-1: SerialNumber: syz [ 321.245688][ T5713] usb 6-1: config 0 descriptor?? [ 321.252902][ T3676] sierra 1-1:0.0: Sierra USB modem converter detected [ 321.303323][ T5713] sierra 6-1:0.0: Sierra USB modem converter detected [ 321.463152][ T3676] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 321.493358][ T3676] usb 1-1: USB disconnect, device number 19 [ 321.525160][ T5713] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 321.540040][ T3676] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 321.595084][ T5713] usb 6-1: USB disconnect, device number 16 [ 321.635023][ T3676] sierra 1-1:0.0: device disconnected [ 321.647788][ T5713] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 321.688699][ T5713] sierra 6-1:0.0: device disconnected 12:55:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540b, &(0x7f0000001ac0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:55:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xf, 0x6, 0x3}, 0x14}}, 0x0) 12:55:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000080)) 12:55:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000080)) 12:55:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000c40)=""/159, 0x9f}, {&(0x7f00000009c0)=""/237, 0xed}, {&(0x7f0000000ac0)=""/161, 0xa1}], 0x4}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f0000000140)=""/85, 0x18c}, {&(0x7f0000000fc0)=""/4093, 0x28c}, {&(0x7f0000000400)=""/106, 0x6}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 12:55:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000080)) 12:55:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000c40)=""/159, 0x9f}, {&(0x7f00000009c0)=""/237, 0xed}, {&(0x7f0000000ac0)=""/161, 0xa1}], 0x4}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f0000000140)=""/85, 0x18c}, {&(0x7f0000000fc0)=""/4093, 0x28c}, {&(0x7f0000000400)=""/106, 0x6}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 12:55:05 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, '\n'}], 0x18}}], 0x2, 0x4000c004) 12:55:06 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:06 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, '\n'}], 0x18}}], 0x2, 0x4000c004) 12:55:06 executing program 4: r0 = socket(0x2a, 0x2, 0x0) bind$can_j1939(r0, 0x0, 0x0) 12:55:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000c40)=""/159, 0x9f}, {&(0x7f00000009c0)=""/237, 0xed}, {&(0x7f0000000ac0)=""/161, 0xa1}], 0x4}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f0000000140)=""/85, 0x18c}, {&(0x7f0000000fc0)=""/4093, 0x28c}, {&(0x7f0000000400)=""/106, 0x6}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 12:55:07 executing program 4: r0 = socket(0x2a, 0x2, 0x0) bind$can_j1939(r0, 0x0, 0x0) 12:55:07 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, '\n'}], 0x18}}], 0x2, 0x4000c004) 12:55:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000c40)=""/159, 0x9f}, {&(0x7f00000009c0)=""/237, 0xed}, {&(0x7f0000000ac0)=""/161, 0xa1}], 0x4}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f0000000140)=""/85, 0x18c}, {&(0x7f0000000fc0)=""/4093, 0x28c}, {&(0x7f0000000400)=""/106, 0x6}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 12:55:07 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, '\n'}], 0x18}}], 0x2, 0x4000c004) 12:55:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:08 executing program 4: r0 = socket(0x2a, 0x2, 0x0) bind$can_j1939(r0, 0x0, 0x0) 12:55:08 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:08 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:08 executing program 4: r0 = socket(0x2a, 0x2, 0x0) bind$can_j1939(r0, 0x0, 0x0) 12:55:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x10000000001b5f, 0x4) sendto$inet6(r0, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)="d3", 0x1) 12:55:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="14006100fe8000000000000000000000000000aabfb4c327513af50ed90ae2bd0a87280a99b62160ff076c4b5c1dde67b06f0554d6c81ae2ce88adf3ded4cc5063b5ee5a2c38304f2d8e64e1c1e1608e44e6819f245be2705582c379b58eccf0cc19f69d96a4e9ffb5da3772d3accb176f08e8f9fb003c817776a6ff834481cfd602f4834445301897f5c39df0467e16818df72a6e66fbf1af54a88603088e9ee412ba6f60d03a2751c6b20bd9549ea6e87da0260ffda06f51c9e75a851abbdd7f2e7d8c03b861313d6e7bad195bd39febfba6955b7d4de2d0c458914ea4f72559de3433a923a37dae153b23c251c8f45687af8872c349055d2468a2d78a2cd5998a006f80a75d9aa01daf586347dd291d1fadc802830d84539f936f08fc6f1f609461fdfee1bcc6637cf25e2d880e15bd4cfb32409838d11c26bbdd2c667d9246d5981102e1c208619e59fd4356e9d3eceb8d647ddf81f7eb7b371387f503340dd8f4e370f09c18bf5957f37cda9efd76180d116d73d132e670f46482d3da9411c52c4d012e2673bb000040009380d6b58c6d96ce4617d9d85821a1fd464c010fc0b483f3b0b2f907510292d8fb26ed61bb50da2e60660580108966d601710652ca23c6a3df073e01750c040086002f8986f08a516b1137e0645750791afb9c46728b0f0a6bb71dc27554f45b1e3545ae0af7ae089c52f1b6e3f5adadc145724013431915fc5452462fdaceefc3fdc56c7bb752c1785e4f0efb10f93744ac0000000000000000"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="14006100fe8000000000000000000000000000aabfb4c327513af50ed90ae2bd0a87280a99b62160ff076c4b5c1dde67b06f0554d6c81ae2ce88adf3ded4cc5063b5ee5a2c38304f2d8e64e1c1e1608e44e6819f245be2705582c379b58eccf0cc19f69d96a4e9ffb5da3772d3accb176f08e8f9fb003c817776a6ff834481cfd602f4834445301897f5c39df0467e16818df72a6e66fbf1af54a88603088e9ee412ba6f60d03a2751c6b20bd9549ea6e87da0260ffda06f51c9e75a851abbdd7f2e7d8c03b861313d6e7bad195bd39febfba6955b7d4de2d0c458914ea4f72559de3433a923a37dae153b23c251c8f45687af8872c349055d2468a2d78a2cd5998a006f80a75d9aa01daf586347dd291d1fadc802830d84539f936f08fc6f1f609461fdfee1bcc6637cf25e2d880e15bd4cfb32409838d11c26bbdd2c667d9246d5981102e1c208619e59fd4356e9d3eceb8d647ddf81f7eb7b371387f503340dd8f4e370f09c18bf5957f37cda9efd76180d116d73d132e670f46482d3da9411c52c4d012e2673bb000040009380d6b58c6d96ce4617d9d85821a1fd464c010fc0b483f3b0b2f907510292d8fb26ed61bb50da2e60660580108966d601710652ca23c6a3df073e01750c040086002f8986f08a516b1137e0645750791afb9c46728b0f0a6bb71dc27554f45b1e3545ae0af7ae089c52f1b6e3f5adadc145724013431915fc5452462fdaceefc3fdc56c7bb752c1785e4f0efb10f93744ac0000000000000000"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:12 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:12 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:15 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:16 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:17 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="14006100fe8000000000000000000000000000aabfb4c327513af50ed90ae2bd0a87280a99b62160ff076c4b5c1dde67b06f0554d6c81ae2ce88adf3ded4cc5063b5ee5a2c38304f2d8e64e1c1e1608e44e6819f245be2705582c379b58eccf0cc19f69d96a4e9ffb5da3772d3accb176f08e8f9fb003c817776a6ff834481cfd602f4834445301897f5c39df0467e16818df72a6e66fbf1af54a88603088e9ee412ba6f60d03a2751c6b20bd9549ea6e87da0260ffda06f51c9e75a851abbdd7f2e7d8c03b861313d6e7bad195bd39febfba6955b7d4de2d0c458914ea4f72559de3433a923a37dae153b23c251c8f45687af8872c349055d2468a2d78a2cd5998a006f80a75d9aa01daf586347dd291d1fadc802830d84539f936f08fc6f1f609461fdfee1bcc6637cf25e2d880e15bd4cfb32409838d11c26bbdd2c667d9246d5981102e1c208619e59fd4356e9d3eceb8d647ddf81f7eb7b371387f503340dd8f4e370f09c18bf5957f37cda9efd76180d116d73d132e670f46482d3da9411c52c4d012e2673bb000040009380d6b58c6d96ce4617d9d85821a1fd464c010fc0b483f3b0b2f907510292d8fb26ed61bb50da2e60660580108966d601710652ca23c6a3df073e01750c040086002f8986f08a516b1137e0645750791afb9c46728b0f0a6bb71dc27554f45b1e3545ae0af7ae089c52f1b6e3f5adadc145724013431915fc5452462fdaceefc3fdc56c7bb752c1785e4f0efb10f93744ac0000000000000000"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:19 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x200, 0x32}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="d9030021000000166942d90316d07933658d39c49e5528648f39451fc787b9713e8f24872c03466158a5c56bb28317ebef6ca738ec11ba25789b04fe4b33bed482aa50c5f76af450892ba7752c9e9cae0624155259d2670c246dee94baade955f56ded856d06c28cd20d5c3be8dc1f58695678fe2708a1dc447deba99bf7b9e9f8", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c653000"]) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x259fdbdd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x10, 0x3e, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic]}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESOCT], 0x2b8}, {&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x280}], 0x3, &(0x7f0000000480), 0x0, 0x8001}, 0x4000084) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 12:55:21 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:22 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe670000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7f6feeec341db4df}}, 0x1c}}, 0x0) [ 340.435246][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.593458][ T9499] device bond2 entered promiscuous mode 12:55:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe670000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7f6feeec341db4df}}, 0x1c}}, 0x0) [ 340.726397][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.864144][ T9504] device bond3 entered promiscuous mode 12:55:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe670000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7f6feeec341db4df}}, 0x1c}}, 0x0) [ 341.125786][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 12:55:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) [ 341.323935][ T9512] device bond4 entered promiscuous mode 12:55:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x6905, 0x0, 0x0, 0x0, 0x0) 12:55:24 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x214c00, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000022c0)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}, {0x0, 0x0, 0xd, 0x0, '/dev/net/tun\x00'}}]}, 0xb8) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x3, 0x8) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x264) 12:55:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe670000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7f6feeec341db4df}}, 0x1c}}, 0x0) [ 341.682860][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.837067][ T9523] device bond5 entered promiscuous mode 12:55:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x36, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000000)=0x37, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x100220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x8, 0xec, &(0x7f00001a7f05)=""/236, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x10001}, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x68) sendto$inet6(r1, &(0x7f0000000680)="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", 0x1bc, 0x4000000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/11, 0xb, 0x40012141, &(0x7f0000000500)=@can={0x1d, r2}, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 12:55:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:26 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:26 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:26 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:26 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:27 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x36, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000000)=0x37, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x100220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x8, 0xec, &(0x7f00001a7f05)=""/236, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x10001}, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x68) sendto$inet6(r1, &(0x7f0000000680)="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", 0x1bc, 0x4000000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/11, 0xb, 0x40012141, &(0x7f0000000500)=@can={0x1d, r2}, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 12:55:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:27 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x36, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000000)=0x37, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x100220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="51574ee1ffe2a38371169b1d72afbbdb3d1aa6320bfc1b40eba37501004b58248deb47a3d07f56209c4b000005aa8ee3b65e187899990f03490cb7fe6728fba9f45fdaaaeb7b1679456eaf08000000b803ea8258c520363bb296d27a480780ea1bb8b963ff62582b40378e000000000000439291866d875f62000054efaa06e673ef75891f23bc573029a47864d2fabe5a52956a0d5d816dc1c5d1113920db500c4548b3d35ee1cbfe00000034dad65fa875b49cde4d8fe216366aad000000998e88abe13eadd2a0fcb0eaf591703bbaf06be361c6fb3e295d7ccc3b30c7cceab1543bdb1a4bba360fcebb6f3a8fbf9cade2248c31d219e12800d0e771997d535c5dc60f2ea25872000016a32547ef6ebbf5f05a6655b058d3dd5628750171836016784790aaf51a0b8cd70d85215259675c5d9f492dab0f7dc8da8911aa3a91f8197558fa1fff62e1d396a0d1527cd043076619cab2c71bee45175fa00b9e4992d057f230fa07453b64912714c9907279b81c8d0e28f453b1855f787d77d4dc73afb431ece3edf6ac6add53c96029c91d9862a458435eba11b1cc24b34bc3bd3540f3271893bf8e29523fa0b174caf32a1858c8a097f40ecf6b701f1d29170a33c4408ab7ca531e8fc487114486a7964542aeafe1f17ec350db716a27dde08ee082d8ce7273bbc24f71c349715bec28aa1365332ebef92052a5b478bdf4a7c5f35cfa43ca3d69291f0089c031028237e2e37193b255ad1d91f56471473ec3dbbf7b143a6af2bfb9f44b4e762ee04844328836e255e433552a92f80985b51e3ecac7f77b3f20ce637a3cc63f51f039af6ecde19203004a0f229d9092f4cb41c243fc0d5250e9b6cf46f366ff1e4a15b7c18baf9addc9376d43f689d5b22bb55941ca9be261d215cb78ad5f2120bc62da89ae37f3f0ed1b6d665d57bdd181b72ae4970ab6926b60aff775d6bd64bee7c53c4920da10184528f26c2713e7f986c8870eab72940efac9e782c5f69f95b927ae984e0da950314d91d79fde37c1abc4f5d2dd62286b0d4b05108730344e5d30b3fa8d721916d396356a4dce418c4199efbb28ba6810e06753b6c921daa2d87d094f9e7275090246254d761fb17bba83d5f7ae9c3dc16065fb7d99e3eaffb63a802fa17c6c640c07511fd926a97bf1bcddd3b287627ded692169ead2b441ebfd2fc3462cbb00000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xec, &(0x7f00001a7f05)=""/236, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x10001}, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x68) sendto$inet6(r1, &(0x7f0000000680)="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", 0x1bc, 0x4000000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/11, 0xb, 0x40012141, &(0x7f0000000500)=@can={0x1d, r2}, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 12:55:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 12:55:28 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 12:55:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x36, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000000)=0x37, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x100220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x8, 0xec, &(0x7f00001a7f05)=""/236, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x10001}, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x68) sendto$inet6(r1, &(0x7f0000000680)="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", 0x1bc, 0x4000000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/11, 0xb, 0x40012141, &(0x7f0000000500)=@can={0x1d, r2}, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 12:55:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setpgid(0x0, 0x0) r1 = dup(r0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240)={0x0, 0x66d7, 0x0, 0x0, 0x1bb}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) [ 345.317054][ T9580] ================================================================== [ 345.325149][ T9580] BUG: KASAN: use-after-free in ipt_do_table+0x1758/0x1980 [ 345.332407][ T9580] Read of size 8 at addr ffff88807777a000 by task syz-executor.5/9580 [ 345.340548][ T9580] [ 345.342859][ T9580] CPU: 0 PID: 9580 Comm: syz-executor.5 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0 [ 345.353172][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 345.363214][ T9580] Call Trace: [ 345.366483][ T9580] [ 345.369406][ T9580] dump_stack_lvl+0xcd/0x134 [ 345.374062][ T9580] print_report.cold+0x2ba/0x719 [ 345.379045][ T9580] ? ipt_do_table+0x1758/0x1980 [ 345.383924][ T9580] kasan_report+0xb1/0x1e0 [ 345.388364][ T9580] ? ipt_do_table+0x1758/0x1980 [ 345.393245][ T9580] ipt_do_table+0x1758/0x1980 [ 345.397957][ T9580] ? finish_task_switch.isra.0+0x2b5/0xc70 [ 345.403808][ T9580] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 345.409813][ T9580] ? __schedule+0xae7/0x52b0 [ 345.414519][ T9580] ? translate_compat_table+0x1840/0x1840 [ 345.420271][ T9580] iptable_mangle_hook+0x64/0x4b0 [ 345.425320][ T9580] nf_hook_slow+0xc5/0x1f0 [ 345.429790][ T9580] nf_hook+0x1cb/0x5b0 [ 345.433893][ T9580] ? __ip_finish_output+0x650/0x650 [ 345.439189][ T9580] ? dst_output+0x170/0x170 [ 345.443716][ T9580] ? netif_rx+0x314/0x590 [ 345.448093][ T9580] ? __local_bh_enable_ip+0x109/0x120 [ 345.453466][ T9580] ? __ip_finish_output+0x650/0x650 [ 345.458679][ T9580] ? ip_mc_finish_output+0x206/0x5a0 [ 345.464090][ T9580] ip_mc_output+0x567/0x700 [ 345.468583][ T9580] ? __ip_finish_output+0x650/0x650 [ 345.473785][ T9580] ip_send_skb+0xd4/0x260 [ 345.478118][ T9580] udp_send_skb+0x725/0x1430 [ 345.482724][ T9580] udp_sendmsg+0x1bb8/0x2740 [ 345.487330][ T9580] ? ip_reply_glue_bits+0xb0/0xb0 [ 345.492376][ T9580] ? __lock_acquire+0x166e/0x56d0 [ 345.497402][ T9580] ? udp_recvmsg+0x12d0/0x12d0 [ 345.502162][ T9580] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 345.508243][ T9580] ? aa_sk_perm+0x30f/0xaa0 [ 345.512820][ T9580] ? aa_af_perm+0x230/0x230 [ 345.517327][ T9580] ? __import_iovec+0x1f7/0x610 [ 345.522281][ T9580] inet_sendmsg+0x99/0xe0 [ 345.526678][ T9580] ? inet_send_prepare+0x4e0/0x4e0 [ 345.531826][ T9580] sock_sendmsg+0xcf/0x120 [ 345.536294][ T9580] ____sys_sendmsg+0x334/0x810 [ 345.541081][ T9580] ? copy_msghdr_from_user+0xfc/0x150 [ 345.546467][ T9580] ? kernel_sendmsg+0x50/0x50 [ 345.551162][ T9580] ___sys_sendmsg+0x110/0x1b0 [ 345.555853][ T9580] ? do_recvmmsg+0x6e0/0x6e0 [ 345.560451][ T9580] ? find_held_lock+0x2d/0x110 [ 345.565206][ T9580] ? __might_fault+0xd1/0x170 [ 345.569878][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 345.574727][ T9580] __sys_sendmmsg+0x18b/0x460 [ 345.579405][ T9580] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 345.584435][ T9580] ? __ct_user_exit+0xff/0x150 [ 345.589191][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 345.594052][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 345.598909][ T9580] ? syscall_enter_from_user_mode+0x22/0xb0 [ 345.604803][ T9580] __x64_sys_sendmmsg+0x99/0x100 [ 345.609737][ T9580] ? syscall_enter_from_user_mode+0x22/0xb0 [ 345.615639][ T9580] do_syscall_64+0x35/0xb0 [ 345.620046][ T9580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 345.625927][ T9580] RIP: 0033:0x7f4056e89409 [ 345.630329][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 345.649922][ T9580] RSP: 002b:00007f4058065168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.658327][ T9580] RAX: ffffffffffffffda RBX: 00007f4056f9c050 RCX: 00007f4056e89409 [ 345.666309][ T9580] RDX: 0400000000000695 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 345.674268][ T9580] RBP: 00007f4056ee4367 R08: 0000000000000000 R09: 0000000000000000 [ 345.682226][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.690182][ T9580] R13: 00007f40574cfb1f R14: 00007f4058065300 R15: 0000000000022000 [ 345.698142][ T9580] [ 345.701146][ T9580] [ 345.703453][ T9580] Allocated by task 3650: [ 345.707759][ T9580] kasan_save_stack+0x1e/0x40 [ 345.712434][ T9580] __kasan_kmalloc+0xa9/0xd0 [ 345.717006][ T9580] kvmalloc_node+0x3e/0x190 [ 345.721496][ T9580] alloc_netdev_mqs+0x98/0x1180 [ 345.726346][ T9580] rtnl_create_link+0x9d7/0xc00 [ 345.731182][ T9580] __rtnl_newlink+0xf8f/0x17e0 [ 345.735985][ T9580] rtnl_newlink+0x64/0xa0 [ 345.740310][ T9580] rtnetlink_rcv_msg+0x43a/0xca0 [ 345.745243][ T9580] netlink_rcv_skb+0x153/0x420 [ 345.750050][ T9580] netlink_unicast+0x543/0x7f0 [ 345.754818][ T9580] netlink_sendmsg+0x917/0xe10 [ 345.759574][ T9580] sock_sendmsg+0xcf/0x120 [ 345.763979][ T9580] __sys_sendto+0x236/0x340 [ 345.768478][ T9580] __x64_sys_sendto+0xdd/0x1b0 [ 345.773244][ T9580] do_syscall_64+0x35/0xb0 [ 345.777660][ T9580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 345.783715][ T9580] [ 345.786023][ T9580] Freed by task 9574: [ 345.789985][ T9580] kasan_save_stack+0x1e/0x40 [ 345.794665][ T9580] kasan_set_track+0x21/0x30 [ 345.799238][ T9580] kasan_set_free_info+0x20/0x30 [ 345.804160][ T9580] ____kasan_slab_free+0x166/0x1c0 [ 345.809255][ T9580] slab_free_freelist_hook+0x8b/0x1c0 [ 345.814620][ T9580] kfree+0xe2/0x580 [ 345.818425][ T9580] kvfree+0x42/0x50 [ 345.822226][ T9580] device_release+0x9f/0x240 [ 345.826885][ T9580] kobject_put+0x1be/0x4c0 [ 345.831295][ T9580] netdev_run_todo+0x75e/0x1100 [ 345.836134][ T9580] vlan_ioctl_handler+0x1a5/0xec0 [ 345.841193][ T9580] sock_ioctl+0x1d8/0x640 [ 345.845504][ T9580] __x64_sys_ioctl+0x193/0x200 [ 345.850252][ T9580] do_syscall_64+0x35/0xb0 [ 345.854680][ T9580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 345.860556][ T9580] [ 345.862861][ T9580] The buggy address belongs to the object at ffff88807777a000 [ 345.862861][ T9580] which belongs to the cache kmalloc-cg-4k of size 4096 [ 345.877166][ T9580] The buggy address is located 0 bytes inside of [ 345.877166][ T9580] 4096-byte region [ffff88807777a000, ffff88807777b000) [ 345.890348][ T9580] [ 345.892680][ T9580] The buggy address belongs to the physical page: [ 345.899106][ T9580] page:ffffea0001ddde00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77778 [ 345.909274][ T9580] head:ffffea0001ddde00 order:3 compound_mapcount:0 compound_pincount:0 [ 345.917599][ T9580] memcg:ffff88807b00f501 [ 345.921833][ T9580] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 345.929803][ T9580] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff88801184c280 [ 345.938374][ T9580] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88807b00f501 [ 345.946933][ T9580] page dumped because: kasan: bad access detected [ 345.953325][ T9580] page_owner tracks the page as allocated [ 345.959019][ T9580] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3644, tgid 3644 (syz-executor.3), ts 111764669875, free_ts 111762818780 [ 345.980719][ T9580] get_page_from_freelist+0x109b/0x2ce0 [ 345.986272][ T9580] __alloc_pages+0x1c7/0x510 [ 345.990854][ T9580] alloc_pages+0x1a6/0x270 [ 345.995257][ T9580] allocate_slab+0x27e/0x3d0 [ 345.999846][ T9580] ___slab_alloc+0x7f1/0xe10 [ 346.004419][ T9580] __slab_alloc.constprop.0+0x4d/0xa0 [ 346.009782][ T9580] __kmalloc_track_caller+0x30f/0x330 [ 346.015153][ T9580] kmemdup+0x23/0x50 [ 346.019039][ T9580] __addrconf_sysctl_register+0x9d/0x3d0 [ 346.024717][ T9580] addrconf_sysctl_register+0x139/0x1d0 [ 346.030353][ T9580] ipv6_add_dev+0xae3/0x1390 [ 346.034933][ T9580] addrconf_notify+0x6f9/0x1c10 [ 346.039772][ T9580] notifier_call_chain+0xb5/0x200 [ 346.044785][ T9580] call_netdevice_notifiers_info+0xb5/0x130 [ 346.050665][ T9580] register_netdevice+0x1127/0x1680 [ 346.055850][ T9580] nsim_create+0x3c3/0x520 [ 346.060299][ T9580] page last free stack trace: [ 346.065059][ T9580] free_pcp_prepare+0x5e4/0xd20 [ 346.069905][ T9580] free_unref_page+0x19/0x4d0 [ 346.074578][ T9580] qlist_free_all+0x6a/0x170 [ 346.079162][ T9580] kasan_quarantine_reduce+0x180/0x200 [ 346.084614][ T9580] __kasan_slab_alloc+0xa2/0xc0 [ 346.089453][ T9580] kmem_cache_alloc+0x267/0x3b0 [ 346.094285][ T9580] __kernfs_new_node+0xd4/0x8b0 [ 346.099207][ T9580] kernfs_new_node+0x93/0x120 [ 346.103873][ T9580] __kernfs_create_file+0x51/0x350 [ 346.108971][ T9580] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 346.114330][ T9580] internal_create_group+0x322/0xb10 [ 346.119596][ T9580] internal_create_groups.part.0+0x90/0x140 [ 346.125476][ T9580] sysfs_create_groups+0x25/0x50 [ 346.130399][ T9580] kobject_add_internal+0x318/0x8f0 [ 346.135580][ T9580] kobject_init_and_add+0x101/0x160 [ 346.140764][ T9580] netdev_queue_update_kobjects+0x1ff/0x4e0 [ 346.146696][ T9580] [ 346.149003][ T9580] Memory state around the buggy address: [ 346.154628][ T9580] ffff888077779f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 346.162683][ T9580] ffff888077779f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 346.170725][ T9580] >ffff88807777a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 346.178787][ T9580] ^ [ 346.182854][ T9580] ffff88807777a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 346.190914][ T9580] ffff88807777a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 346.198973][ T9580] ================================================================== [ 346.207085][ T9580] Kernel panic - not syncing: panic_on_warn set ... [ 346.213670][ T9580] CPU: 0 PID: 9580 Comm: syz-executor.5 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0 [ 346.223978][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 346.234018][ T9580] Call Trace: [ 346.237282][ T9580] [ 346.240211][ T9580] dump_stack_lvl+0xcd/0x134 [ 346.244811][ T9580] panic+0x2c8/0x627 [ 346.248716][ T9580] ? panic_print_sys_info.part.0+0x10b/0x10b [ 346.254682][ T9580] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 346.260866][ T9580] ? ipt_do_table+0x1758/0x1980 [ 346.265705][ T9580] end_report.part.0+0x3f/0x7c [ 346.270460][ T9580] kasan_report.cold+0xa/0xf [ 346.275039][ T9580] ? ipt_do_table+0x1758/0x1980 [ 346.279881][ T9580] ipt_do_table+0x1758/0x1980 [ 346.284549][ T9580] ? finish_task_switch.isra.0+0x2b5/0xc70 [ 346.290342][ T9580] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 346.296310][ T9580] ? __schedule+0xae7/0x52b0 [ 346.300888][ T9580] ? translate_compat_table+0x1840/0x1840 [ 346.306621][ T9580] iptable_mangle_hook+0x64/0x4b0 [ 346.311665][ T9580] nf_hook_slow+0xc5/0x1f0 [ 346.316086][ T9580] nf_hook+0x1cb/0x5b0 [ 346.320147][ T9580] ? __ip_finish_output+0x650/0x650 [ 346.325333][ T9580] ? dst_output+0x170/0x170 [ 346.329824][ T9580] ? netif_rx+0x314/0x590 [ 346.334136][ T9580] ? __local_bh_enable_ip+0x109/0x120 [ 346.339492][ T9580] ? __ip_finish_output+0x650/0x650 [ 346.344675][ T9580] ? ip_mc_finish_output+0x206/0x5a0 [ 346.349947][ T9580] ip_mc_output+0x567/0x700 [ 346.354435][ T9580] ? __ip_finish_output+0x650/0x650 [ 346.359615][ T9580] ip_send_skb+0xd4/0x260 [ 346.363935][ T9580] udp_send_skb+0x725/0x1430 [ 346.368513][ T9580] udp_sendmsg+0x1bb8/0x2740 [ 346.373090][ T9580] ? ip_reply_glue_bits+0xb0/0xb0 [ 346.378100][ T9580] ? __lock_acquire+0x166e/0x56d0 [ 346.383107][ T9580] ? udp_recvmsg+0x12d0/0x12d0 [ 346.387870][ T9580] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 346.393838][ T9580] ? aa_sk_perm+0x30f/0xaa0 [ 346.398331][ T9580] ? aa_af_perm+0x230/0x230 [ 346.402820][ T9580] ? __import_iovec+0x1f7/0x610 [ 346.407662][ T9580] inet_sendmsg+0x99/0xe0 [ 346.411989][ T9580] ? inet_send_prepare+0x4e0/0x4e0 [ 346.417535][ T9580] sock_sendmsg+0xcf/0x120 [ 346.421939][ T9580] ____sys_sendmsg+0x334/0x810 [ 346.426688][ T9580] ? copy_msghdr_from_user+0xfc/0x150 [ 346.432045][ T9580] ? kernel_sendmsg+0x50/0x50 [ 346.436718][ T9580] ___sys_sendmsg+0x110/0x1b0 [ 346.441391][ T9580] ? do_recvmmsg+0x6e0/0x6e0 [ 346.445969][ T9580] ? find_held_lock+0x2d/0x110 [ 346.450723][ T9580] ? __might_fault+0xd1/0x170 [ 346.455388][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 346.460230][ T9580] __sys_sendmmsg+0x18b/0x460 [ 346.464898][ T9580] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 346.469913][ T9580] ? __ct_user_exit+0xff/0x150 [ 346.474662][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 346.479498][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 346.484339][ T9580] ? syscall_enter_from_user_mode+0x22/0xb0 [ 346.490220][ T9580] __x64_sys_sendmmsg+0x99/0x100 [ 346.495147][ T9580] ? syscall_enter_from_user_mode+0x22/0xb0 [ 346.501027][ T9580] do_syscall_64+0x35/0xb0 [ 346.505429][ T9580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 346.511321][ T9580] RIP: 0033:0x7f4056e89409 [ 346.515747][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 346.535375][ T9580] RSP: 002b:00007f4058065168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.543883][ T9580] RAX: ffffffffffffffda RBX: 00007f4056f9c050 RCX: 00007f4056e89409 [ 346.551853][ T9580] RDX: 0400000000000695 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 346.559809][ T9580] RBP: 00007f4056ee4367 R08: 0000000000000000 R09: 0000000000000000 [ 346.567784][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.575754][ T9580] R13: 00007f40574cfb1f R14: 00007f4058065300 R15: 0000000000022000 [ 346.584154][ T9580] [ 346.587406][ T9580] Kernel Offset: disabled [ 346.591721][ T9580] Rebooting in 86400 seconds..