R_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1651.854972] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1651.857966] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1651.887935] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1651.937841] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1651.952057] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1651.954361] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1651.961269] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1651.989615] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1651.999240] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.006627] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.014378] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.018819] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1652.030956] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 05:00:05 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x81000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1652.041650] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.045186] hid-generic 0000:0000:0000.014A: unknown main item tag 0x0 [ 1652.067342] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.090471] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.096756] hid-generic 0000:0000:0000.014A: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1652.115162] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.136479] hid-generic 0000:0000:0000.014B: unknown main item tag 0x0 [ 1652.167757] hid-generic 0000:0000:0000.014B: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1652.168920] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.223140] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 05:00:05 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r1) 05:00:05 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:05 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1652.297111] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.330658] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.368430] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.375789] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.382494] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.413655] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.420360] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.452730] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 05:00:05 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88470000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1652.483443] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.489015] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.490591] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.504306] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.510996] hid-generic 0000:0000:0000.014C: unknown main item tag 0x0 [ 1652.519513] hid-generic 0000:0000:0000.014C: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:05 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x0, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1652.540053] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.551150] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.575474] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.601263] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.604665] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.618563] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 05:00:05 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88480000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:05 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1652.648006] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.665826] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.678161] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.705125] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.711734] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.738014] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.741522] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.768544] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.771276] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.782710] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 [ 1652.786197] hid-generic 0000:0000:0000.014D: unknown main item tag 0x0 [ 1652.790550] hid-generic 0000:0000:0000.014E: unknown main item tag 0x0 05:00:05 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88640000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:06 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1652.815316] hid-generic 0000:0000:0000.014E: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1652.833428] hid-generic 0000:0000:0000.014D: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:06 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x0, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1652.895480] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1652.914344] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1652.948326] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1652.976512] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.000857] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.008581] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.015751] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.027881] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.035030] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.042400] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.042442] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.061090] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.067848] hid-generic 0000:0000:0000.014F: unknown main item tag 0x0 [ 1653.084486] hid-generic 0000:0000:0000.014F: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1653.109297] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.120978] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.137853] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.141762] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.145176] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.158945] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.162132] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.179180] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.183215] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.186550] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.199162] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.205839] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.213099] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.213268] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.222561] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.232555] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.233766] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.240736] hid-generic 0000:0000:0000.0151: unknown main item tag 0x0 [ 1653.247361] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.260902] hid-generic 0000:0000:0000.0150: unknown main item tag 0x0 [ 1653.270433] hid-generic 0000:0000:0000.0151: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1653.280612] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.287826] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.295262] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.306140] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.316530] hid-generic 0000:0000:0000.0150: hidraw4: HID v0.00 Device [syz1] on syz1 [ 1653.324019] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.333377] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.356712] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.371346] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.383420] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.391173] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 05:00:06 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) 05:00:06 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:06 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:06 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x0, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1653.404470] hid-generic 0000:0000:0000.0152: unknown main item tag 0x0 [ 1653.430983] hid-generic 0000:0000:0000.0152: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:06 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1653.498790] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.509153] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.518710] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.525158] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 05:00:06 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1653.560927] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.581026] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.608130] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.627649] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.638732] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.665380] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.675174] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.695622] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.696639] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.702528] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 05:00:06 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x89060000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1653.718975] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.729290] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.734347] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.743036] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.743546] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.762131] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.763035] hid-generic 0000:0000:0000.0154: unknown main item tag 0x0 [ 1653.781772] hid-generic 0000:0000:0000.0153: unknown main item tag 0x0 [ 1653.786084] hid-generic 0000:0000:0000.0154: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1653.810682] hid-generic 0000:0000:0000.0153: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:06 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:07 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1653.838847] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.860615] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.874557] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 05:00:07 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffa888, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1653.890591] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.927335] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.947845] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.969207] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.982118] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1653.997035] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 05:00:07 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffca88, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1654.078359] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1654.179692] hid-generic 0000:0000:0000.0155: unknown main item tag 0x0 [ 1654.226526] hid-generic 0000:0000:0000.0155: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1654.247362] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.283096] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.289991] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.296738] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.303474] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.310282] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.318028] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.324777] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 05:00:07 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) 05:00:07 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffdd86, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:07 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:07 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1654.331472] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.338260] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.344988] hid-generic 0000:0000:0000.0156: unknown main item tag 0x0 [ 1654.352610] hid-generic 0000:0000:0000.0156: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:07 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1654.512949] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.527919] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.535372] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.542552] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.542889] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 05:00:07 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xfffff000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1654.619754] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.643813] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.654526] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.670492] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.679410] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.686959] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.699852] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.702518] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 05:00:07 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1654.722491] hid-generic 0000:0000:0000.0157: unknown main item tag 0x0 [ 1654.742635] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.787755] hid-generic 0000:0000:0000.0157: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1654.805178] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 05:00:08 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffffffffffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1654.882760] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.935771] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.974379] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1654.981103] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 05:00:08 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x100000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:08 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1655.021058] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1655.037511] hid-generic 0000:0000:0000.0158: unknown main item tag 0x0 [ 1655.046999] hid-generic 0000:0000:0000.0158: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1655.161741] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.191072] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.203998] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.220973] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.227979] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.236773] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.257573] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.270245] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.277202] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.284942] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 [ 1655.291837] hid-generic 0000:0000:0000.0159: unknown main item tag 0x0 05:00:08 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) 05:00:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x200000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1655.320075] hid-generic 0000:0000:0000.0159: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:08 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x300000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1655.556570] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 [ 1655.563291] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 [ 1655.591938] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 05:00:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x600000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1655.611040] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 [ 1655.622105] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 [ 1655.631751] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 [ 1655.671728] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 [ 1655.694091] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 05:00:08 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1655.737040] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 05:00:09 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1655.800407] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 05:00:09 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x700000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1655.842518] hid-generic 0000:0000:0000.015A: unknown main item tag 0x0 05:00:09 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1655.897589] hid-generic 0000:0000:0000.015A: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x800000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1656.061886] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.077188] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.088361] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 05:00:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x806000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1656.113157] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.182390] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.200051] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.231275] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.257686] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.272109] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.280810] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 [ 1656.292897] hid-generic 0000:0000:0000.015B: unknown main item tag 0x0 05:00:09 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) dup2(r2, r1) 05:00:09 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1656.321978] hid-generic 0000:0000:0000.015B: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xb00000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1656.481974] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.492498] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.492872] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.516009] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.527107] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.540072] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.556713] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.563772] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.570649] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 05:00:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xd00000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1656.570735] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.584463] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.591414] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.598642] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.605671] hid-generic 0000:0000:0000.015C: unknown main item tag 0x0 [ 1656.618077] hid-generic 0000:0000:0000.015C: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:09 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1656.659173] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 05:00:09 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1656.734154] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 05:00:10 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x1000000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:10 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1656.793726] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.800450] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.800472] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.800491] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.800509] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 05:00:10 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1656.899708] hid-generic 0000:0000:0000.015D: unknown main item tag 0x0 [ 1656.907931] hid-generic 0000:0000:0000.015D: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:10 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x1100000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1657.035751] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.042484] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.071112] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 05:00:10 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:10 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x1400000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1657.092136] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.112009] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.122200] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.144583] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.170057] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 05:00:10 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:10 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x2000000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1657.210578] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.273222] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 [ 1657.305660] hid-generic 0000:0000:0000.015E: unknown main item tag 0x0 05:00:10 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x2800000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1657.357039] hid-generic 0000:0000:0000.015E: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1657.394638] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.401356] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 05:00:10 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1657.474386] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.499236] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.531166] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.553717] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.560446] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 05:00:10 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1657.576182] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.585346] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.592039] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.612472] hid-generic 0000:0000:0000.015F: unknown main item tag 0x0 [ 1657.621771] hid-generic 0000:0000:0000.015F: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1657.652471] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.676861] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.684289] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 05:00:10 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:10 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:10 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x3f00000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:10 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) gettid() r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1657.710603] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.724170] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.731035] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.738258] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.745482] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.804252] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.837612] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 05:00:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1657.861934] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1657.880356] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.888184] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1657.922335] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1657.932005] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1657.942912] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1657.972217] hid-generic 0000:0000:0000.0160: unknown main item tag 0x0 [ 1657.980409] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1658.000078] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 05:00:11 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1658.028971] hid-generic 0000:0000:0000.0160: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1658.038301] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1658.050678] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1658.076458] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.097660] hid-generic 0000:0000:0000.0161: unknown main item tag 0x0 [ 1658.098208] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 05:00:11 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1658.123414] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.131520] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.139070] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.148356] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.163329] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 05:00:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x4305000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1658.179717] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.186954] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.189831] hid-generic 0000:0000:0000.0161: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1658.194193] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.210045] hid-generic 0000:0000:0000.0162: unknown main item tag 0x0 [ 1658.220709] hid-generic 0000:0000:0000.0162: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:11 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:11 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1658.280018] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.287780] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.300874] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.308068] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.336096] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.338907] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.359439] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.402194] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.415017] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.432593] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.438695] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 05:00:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1658.447742] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.456224] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.463368] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.467967] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.470434] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.501700] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.507302] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.528412] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.535815] hid-generic 0000:0000:0000.0164: unknown main item tag 0x0 [ 1658.536713] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 05:00:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x800e000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1658.568923] hid-generic 0000:0000:0000.0164: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1658.569593] hid-generic 0000:0000:0000.0163: unknown main item tag 0x0 [ 1658.613053] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.620721] hid-generic 0000:0000:0000.0163: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1658.654625] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.699413] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.717009] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.723952] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.730925] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.737970] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.751812] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.767822] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 05:00:11 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:11 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:11 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:11 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x8035000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1658.792427] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 [ 1658.799671] hid-generic 0000:0000:0000.0165: unknown main item tag 0x0 05:00:12 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) dup2(r1, r0) [ 1658.838575] hid-generic 0000:0000:0000.0165: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:12 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x8100000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1658.908192] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1658.925870] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1658.929039] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 05:00:12 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1658.961255] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1658.990202] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.013915] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.041507] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.044385] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.051268] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 05:00:12 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) dup2(r1, r0) [ 1659.068735] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.089246] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.095569] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 05:00:12 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff00000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1659.121970] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.128130] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.136814] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.143794] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.150687] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.153834] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.182137] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.185981] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 [ 1659.199186] hid-generic 0000:0000:0000.0167: unknown main item tag 0x0 [ 1659.214272] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.220632] hid-generic 0000:0000:0000.0166: unknown main item tag 0x0 05:00:12 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) dup2(r1, r0) [ 1659.220966] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 05:00:12 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1659.254561] hid-generic 0000:0000:0000.0166: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1659.255742] hid-generic 0000:0000:0000.0167: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1659.301381] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.342135] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.348508] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.371932] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.374536] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.398631] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.409460] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.416742] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.423546] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.424205] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.431121] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.437992] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.450088] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.451501] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.458149] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.465099] hid-generic 0000:0000:0000.0168: unknown main item tag 0x0 [ 1659.477658] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.489242] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.494519] hid-generic 0000:0000:0000.0168: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1659.501151] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.512730] hid-generic 0000:0000:0000.0169: unknown main item tag 0x0 [ 1659.529919] hid-generic 0000:0000:0000.0169: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1659.563148] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.622757] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.661988] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.669268] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.676140] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.682833] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.703852] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.710543] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 05:00:12 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:12 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x8847000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:12 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:12 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:12 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) [ 1659.718859] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.767868] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.787706] hid-generic 0000:0000:0000.016A: unknown main item tag 0x0 [ 1659.804417] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.811112] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.833503] hid-generic 0000:0000:0000.016A: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1659.861193] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.875710] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 05:00:13 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x8848000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1659.882981] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.890343] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.898161] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.914661] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 05:00:13 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1659.938655] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1659.976608] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 05:00:13 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(0xffffffffffffffff, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1660.002057] hid-generic 0000:0000:0000.016B: unknown main item tag 0x0 [ 1660.025455] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 05:00:13 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x8864000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1660.049378] hid-generic 0000:0000:0000.016B: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1660.059574] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.073384] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.089207] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 05:00:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1660.113092] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.130866] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.158518] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.172406] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.184143] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.199628] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.208725] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.218962] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.234673] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.240336] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.247774] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 05:00:13 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff00000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1660.255763] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.284714] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.285429] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.312449] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.337037] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.340780] hid-generic 0000:0000:0000.016D: unknown main item tag 0x0 [ 1660.358933] hid-generic 0000:0000:0000.016C: unknown main item tag 0x0 [ 1660.366021] hid-generic 0000:0000:0000.016D: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1660.390012] hid-generic 0000:0000:0000.016C: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:13 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:13 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(0xffffffffffffffff, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:13 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff00000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:13 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:13 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) 05:00:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1660.622614] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.644088] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 05:00:13 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x8906000000000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1660.671236] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.682763] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.700756] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.720968] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.732498] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.755140] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.757048] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.762040] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.778736] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.786411] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.789184] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.794435] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.806138] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.807507] hid-generic 0000:0000:0000.016E: unknown main item tag 0x0 [ 1660.815768] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.841809] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.845239] hid-generic 0000:0000:0000.016E: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffffff00000000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1660.870510] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.880640] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.893178] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 [ 1660.900987] hid-generic 0000:0000:0000.016F: unknown main item tag 0x0 05:00:14 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) 05:00:14 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1660.924137] hid-generic 0000:0000:0000.016F: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1660.937091] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1660.984176] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.019787] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 05:00:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffffffff000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1661.048585] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.055812] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.062676] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.071265] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.078819] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.086000] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.118343] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.129099] hid-generic 0000:0000:0000.0170: unknown main item tag 0x0 [ 1661.138462] hid-generic 0000:0000:0000.0170: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1661.169069] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.196639] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.207280] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.216708] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.244564] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.251262] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.294644] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.301331] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.346423] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.353118] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.373994] hid-generic 0000:0000:0000.0171: unknown main item tag 0x0 [ 1661.382792] hid-generic 0000:0000:0000.0171: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1661.393193] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.399992] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.400011] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.400031] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.400049] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.400068] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.400086] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.400104] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 05:00:14 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:14 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(0xffffffffffffffff, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:14 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) [ 1661.464391] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.480927] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.490947] hid-generic 0000:0000:0000.0172: unknown main item tag 0x0 [ 1661.498869] hid-generic 0000:0000:0000.0172: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:14 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1661.572226] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.592701] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.613124] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 05:00:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:14 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1661.630510] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.667358] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.682193] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.698610] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.720015] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.724162] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.739508] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.750507] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.756351] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.765128] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.772515] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 05:00:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1661.776746] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.779753] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.790736] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.793917] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.813652] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 [ 1661.820873] hid-generic 0000:0000:0000.0174: unknown main item tag 0x0 05:00:15 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1661.829219] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.849845] hid-generic 0000:0000:0000.0173: unknown main item tag 0x0 [ 1661.856229] hid-generic 0000:0000:0000.0174: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1661.867360] hid-generic 0000:0000:0000.0173: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:15 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x7, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:15 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) [ 1661.921106] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1661.957650] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1661.999949] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.024697] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.026863] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.031397] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.031423] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.031442] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.052761] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.070103] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.077238] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.086537] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 05:00:15 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1662.102535] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.111192] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.118313] hid-generic 0000:0000:0000.0175: unknown main item tag 0x0 [ 1662.130167] hid-generic 0000:0000:0000.0175: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1662.189918] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.205480] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.214481] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.221303] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.228299] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.235181] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.242215] hid-generic 0000:0000:0000.0176: unknown main item tag 0x0 [ 1662.251593] hid-generic 0000:0000:0000.0176: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1662.266516] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.299615] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.307118] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.319420] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.339127] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.346185] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.352874] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.394492] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.401215] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.407974] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 [ 1662.423700] hid-generic 0000:0000:0000.0177: unknown main item tag 0x0 05:00:15 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:15 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:15 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:15 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) [ 1662.436470] hid-generic 0000:0000:0000.0177: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1662.472896] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.493070] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 05:00:15 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1662.528621] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.556279] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 05:00:15 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1662.582254] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 05:00:15 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1662.630114] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.668123] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.698645] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.724758] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.739398] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 05:00:15 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:15 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1662.746398] hid-generic 0000:0000:0000.0178: unknown main item tag 0x0 [ 1662.793222] hid-generic 0000:0000:0000.0178: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1662.829624] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1662.857270] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1662.881585] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 05:00:16 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x200000}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@rand_addr="0783484b74286e60cc5eca1d6b332ed4", 0x71, r2}) [ 1662.910373] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1662.984321] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 05:00:16 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, 0x0, 0x0) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1663.034868] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1663.078040] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1663.097743] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1663.104674] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1663.112074] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1663.120310] hid-generic 0000:0000:0000.0179: unknown main item tag 0x0 [ 1663.166254] hid-generic 0000:0000:0000.0179: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:16 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x11, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:16 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:16 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) read(r0, 0x0, 0x0) 05:00:16 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1663.416672] audit: type=1400 audit(1552021216.577:93): avc: denied { dyntransition } for pid=19240 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=process permissive=1 [ 1663.461074] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.470005] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.481650] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.490962] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.502594] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 05:00:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:16 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, 0x0, 0x0) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1663.509972] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 05:00:16 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x14, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:16 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) read(r0, 0x0, 0x0) [ 1663.541939] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.572099] audit: type=1400 audit(1552021216.587:94): avc: denied { dyntransition } for pid=19240 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=process permissive=1 [ 1663.572255] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.615222] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.640069] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.667691] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.681491] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.690178] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.702714] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 05:00:16 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:16 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000100)='./file0\x00') getcwd(&(0x7f0000000280)=""/253, 0xfd) [ 1663.721248] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.724254] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.736521] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.743548] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.758143] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 05:00:16 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, 0x0, 0x0) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1663.776087] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.787772] hid-generic 0000:0000:0000.017B: unknown main item tag 0x0 [ 1663.806242] hid-generic 0000:0000:0000.017A: unknown main item tag 0x0 [ 1663.820726] hid-generic 0000:0000:0000.017B: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) accept$packet(r1, 0x0, 0x0) [ 1663.847378] hid-generic 0000:0000:0000.017A: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:17 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x811af15e52ff62ec, 0x0) 05:00:17 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:17 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x60, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1663.901633] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1663.963036] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.009025] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.026488] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.029265] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 05:00:17 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1664.071546] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.072999] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.096830] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.107033] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.130771] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.152656] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.156370] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.186928] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.189563] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.212398] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.236482] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.237491] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.251187] hid-generic 0000:0000:0000.017C: unknown main item tag 0x0 [ 1664.271046] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.278307] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.285253] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.292125] hid-generic 0000:0000:0000.017D: unknown main item tag 0x0 [ 1664.309478] hid-generic 0000:0000:0000.017C: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:17 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:17 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:17 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x811af15e52ff62ec, 0x0) [ 1664.334304] hid-generic 0000:0000:0000.017D: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:17 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:17 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1664.437116] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.468840] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.473706] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.486987] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.502935] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 05:00:17 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x300, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1664.528982] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.546689] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.560324] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.576388] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.595656] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.598709] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.619960] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.630733] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.645866] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.653100] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.672928] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 [ 1664.683877] cgroup: fork rejected by pids controller in /syz4 [ 1664.691220] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.699863] hid-generic 0000:0000:0000.017F: unknown main item tag 0x0 05:00:17 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x543, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1664.737979] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.747954] hid-generic 0000:0000:0000.017F: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1664.839475] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.883499] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.909504] hid-generic 0000:0000:0000.017E: unknown main item tag 0x0 [ 1664.917148] hid-generic 0000:0000:0000.017E: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) accept$packet(r1, 0x0, 0x0) 05:00:18 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:18 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:18 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x811af15e52ff62ec, 0x0) 05:00:18 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x600, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1665.105553] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.112271] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.127192] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.148454] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.169472] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.182216] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.185741] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.191518] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.212677] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 05:00:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x608, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1665.230922] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.239098] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.243086] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.252244] hid-generic 0000:0000:0000.0180: unknown main item tag 0x0 [ 1665.261519] hid-generic 0000:0000:0000.0180: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1665.274688] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.318574] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.323882] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.342069] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.354900] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 05:00:18 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r1, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:18 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1665.369299] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.406095] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.406551] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 05:00:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x689, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1665.438321] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.463488] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.465346] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.500071] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.502615] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 05:00:18 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1665.543247] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.546093] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.559594] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 [ 1665.579170] hid-generic 0000:0000:0000.0181: unknown main item tag 0x0 05:00:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x700, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1665.593976] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.623164] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.629821] hid-generic 0000:0000:0000.0181: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1665.654884] hid-generic 0000:0000:0000.0182: unknown main item tag 0x0 [ 1665.678304] hid-generic 0000:0000:0000.0182: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:19 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "82c61c712e15785a12f72384edcac320ad5830c7df2910c459474b50428026c1"}) 05:00:19 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:19 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) 05:00:19 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r1, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x806, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:19 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) [ 1665.890158] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1665.890174] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1665.907200] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 05:00:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb00, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1665.936042] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1665.941967] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1665.972667] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1665.973773] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 05:00:19 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}, 0x8}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) [ 1665.990876] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1666.003466] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1666.020545] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1666.030889] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1666.051335] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1666.074183] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1666.084967] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 05:00:19 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) 05:00:19 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r1, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1666.114893] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1666.117962] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 [ 1666.150275] hid-generic 0000:0000:0000.0183: unknown main item tag 0x0 05:00:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd00, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1666.162407] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1666.170174] hid-generic 0000:0000:0000.0183: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1666.203525] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 05:00:19 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) [ 1666.231876] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1666.261129] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 05:00:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 1666.300006] hid-generic 0000:0000:0000.0184: unknown main item tag 0x0 [ 1666.318113] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.331712] hid-generic 0000:0000:0000.0184: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1666.337221] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.364414] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.399309] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.425235] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.444220] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.462730] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 05:00:19 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xe80, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1666.489366] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.497637] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.517210] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.537620] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.540766] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.544947] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.568603] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.571723] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.582040] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 05:00:19 executing program 4: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 05:00:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1100, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1666.585529] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.595111] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.603418] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.612567] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.625988] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 1666.629242] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 1666.652715] hid-generic 0000:0000:0000.0185: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1666.688577] hid-generic 0000:0000:0000.0186: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:19 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, 0x0, 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1666.690076] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.705014] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.712743] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.748265] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.758686] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 05:00:19 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) 05:00:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3823f2000001bc0d1f0058ec0000029b0197feffbd0128c1b8b2db9b5436b249463d7015aede0437e1cc963aa7258335d343c7000000001758"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 1666.791105] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.800139] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.824858] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.832491] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 05:00:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1400, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1666.853168] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1666.859050] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.869299] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.875796] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1666.899036] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.906412] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.930214] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.933654] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1666.939411] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.959471] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.967964] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.979646] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1666.988638] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1666.991269] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1667.000282] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 1667.011299] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1667.014507] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1667.030923] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 1667.040224] hid-generic 0000:0000:0000.0188: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1667.050018] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 05:00:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:20 executing program 4: creat(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000}) [ 1667.068832] hid-generic 0000:0000:0000.0187: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1667.081058] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1667.090976] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1667.114415] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 05:00:20 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) [ 1667.153248] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 [ 1667.183408] hid-generic 0000:0000:0000.0189: unknown main item tag 0x0 05:00:20 executing program 1: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000001c3adde7963209aa0000004e2311b5302ff902bf40e2ce65000000084000800000000000c2da73c2cfd4007de44890a8744f3a1e51ceed0c46ce2f4f512ac97dce"], 0x4a) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:00:20 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1667.236285] hid-generic 0000:0000:0000.0189: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:20 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, 0x0, 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2800, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1667.326958] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 [ 1667.371485] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 [ 1667.407791] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 05:00:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}, 0x8}], 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) [ 1667.426674] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 05:00:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3580, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1667.485330] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 [ 1667.516285] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 05:00:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880e1ec20125fd1756f8cd3c20040ee57180f9ba9186f17b029b8c98c3ab7a648984d07c7d108ce0db24d3310c1fc6867b31c8d3b87ccdd0c3ffe1a85bb72e03a5d0c0a2b5b883fc5cccfeef783916"], 0x1}}, 0x0) [ 1667.547628] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 [ 1667.570428] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 [ 1667.578037] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 05:00:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1667.593921] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 05:00:20 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, 0x0, 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f00, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1667.629155] hid-generic 0000:0000:0000.018A: unknown main item tag 0x0 [ 1667.675698] hid-generic 0000:0000:0000.018A: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:20 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1667.726181] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.750388] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.792007] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.813479] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.833111] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 05:00:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1667.842604] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.850379] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.863762] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.888924] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.903431] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.910968] hid-generic 0000:0000:0000.018B: unknown main item tag 0x0 [ 1667.940467] hid-generic 0000:0000:0000.018B: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:21 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:21 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4305, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:21 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) [ 1668.106439] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.113163] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.133866] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.140992] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 05:00:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4788, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1668.167938] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.202025] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.207522] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.233783] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.247624] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.255174] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 05:00:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1668.265521] audit: type=1400 audit(1552021221.427:95): avc: denied { setattr } for pid=21695 comm="syz-executor.1" path="/proc/21695/task/21700/attr/current" dev="proc" ino=74366 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 1668.276880] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.295306] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.313546] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.330925] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.341363] audit: type=1400 audit(1552021221.457:96): avc: denied { setattr } for pid=21695 comm="syz-executor.1" path="/proc/21695/task/21700/attr/current" dev="proc" ino=74366 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=file permissive=1 [ 1668.350618] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.376935] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 05:00:21 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x6a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) [ 1668.376957] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 [ 1668.376975] hid-generic 0000:0000:0000.018C: unknown main item tag 0x0 05:00:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4888, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1668.438277] hid-generic 0000:0000:0000.018C: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1668.557885] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.606050] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.612764] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 05:00:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:21 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) [ 1668.683842] hid-generic 0000:0000:0000.018D: unknown main item tag 0x0 [ 1668.719276] hid-generic 0000:0000:0000.018D: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:21 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:21 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, 0x0) getpgrp(0xffffffffffffffff) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x6c2c, 0x80000) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 05:00:21 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6488, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1668.837115] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1668.859288] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1668.920018] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1668.964732] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 05:00:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 05:00:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1669.008058] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1669.046552] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 05:00:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xfffffedb}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r1, 0x1000000000016) [ 1669.096814] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1669.124843] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1669.178514] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 05:00:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) [ 1669.236446] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1669.294348] hid-generic 0000:0000:0000.018E: unknown main item tag 0x0 [ 1669.310587] hid-generic 0000:0000:0000.018E: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:22 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:22 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) 05:00:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 05:00:22 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8100, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:22 executing program 1: ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000180)=0xf000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0023d988"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x270c, @host}, 0x10, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:00:22 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1669.700006] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.719774] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 05:00:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8847, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1669.754289] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.781510] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 05:00:23 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1669.816543] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.840553] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.851734] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.869401] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.891051] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.903829] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 05:00:23 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8848, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1669.916833] hid-generic 0000:0000:0000.018F: unknown main item tag 0x0 [ 1669.936987] hid-generic 0000:0000:0000.018F: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:23 executing program 1: timer_create(0x3, 0x0, &(0x7f0000044000)) exit(0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000002c0)) 05:00:23 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) [ 1670.178896] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.199014] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.220877] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.237917] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.247153] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.258430] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.271338] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.283030] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.292692] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.306601] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.317750] hid-generic 0000:0000:0000.0190: unknown main item tag 0x0 [ 1670.333445] hid-generic 0000:0000:0000.0190: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:23 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:23 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:23 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8864, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:23 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000001c0)) 05:00:23 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, 0x0, 0x0) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:23 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8906, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1670.590046] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.613680] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 05:00:23 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1670.651947] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.668276] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.676415] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.697703] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.735198] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.769441] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 05:00:23 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1670.793142] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.803206] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.811699] hid-generic 0000:0000:0000.0191: unknown main item tag 0x0 [ 1670.823457] hid-generic 0000:0000:0000.0191: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:24 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 05:00:24 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 05:00:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf0ffff, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1670.980325] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1670.996273] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.024908] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.055204] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.091228] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.115325] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.151649] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.188974] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.218152] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.249933] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.266015] hid-generic 0000:0000:0000.0192: unknown main item tag 0x0 [ 1671.291794] hid-generic 0000:0000:0000.0192: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:24 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:24 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:24 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 05:00:24 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, 0x0, 0x0) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000001c3adde7963209aa0000004e2311b5302ff902bf40e2ce65000000084000800000000000c2da73c2cfd4007de44890a8744f3a1e51ceed0c46ce2f4f512ac97dce"], 0x4a) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 05:00:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x1fffff}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)={r0}) 05:00:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1671.660943] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.682169] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.714526] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 05:00:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 05:00:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1671.755386] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.778164] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.788270] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 05:00:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1671.801423] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.819648] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.858426] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.877937] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.894855] hid-generic 0000:0000:0000.0193: unknown main item tag 0x0 [ 1671.932076] hid-generic 0000:0000:0000.0193: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:25 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:25 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x155ab8bf, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200085}) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ce\x00'}, 0x80, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 05:00:25 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, 0x0, 0x0) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:25 executing program 2: 05:00:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x7000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1672.491867] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.504750] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 05:00:25 executing program 2: [ 1672.554779] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.590748] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.617691] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.643144] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 05:00:25 executing program 1: 05:00:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1672.664048] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.702142] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.732481] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.767186] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.783997] hid-generic 0000:0000:0000.0194: unknown main item tag 0x0 [ 1672.806724] hid-generic 0000:0000:0000.0194: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:26 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:26 executing program 2: 05:00:26 executing program 1: 05:00:26 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8060000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:26 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(0xffffffffffffffff, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:26 executing program 1: 05:00:26 executing program 2: 05:00:26 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1673.375890] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 05:00:26 executing program 1: [ 1673.418617] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 05:00:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:26 executing program 2: [ 1673.462587] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.491968] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.550518] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.576142] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.596833] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.611508] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.620524] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.633238] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.651556] hid-generic 0000:0000:0000.0195: unknown main item tag 0x0 [ 1673.667778] hid-generic 0000:0000:0000.0195: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:27 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:27 executing program 1: 05:00:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:27 executing program 2: 05:00:27 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(0xffffffffffffffff, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:27 executing program 2: 05:00:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x10000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1674.250220] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.278220] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 05:00:27 executing program 2: socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) sendfile(r0, r2, 0x0, 0x100000000) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, 0x0, 0x0, 0x100100, &(0x7f0000000100)=@abs, 0x6e) dup2(r2, r1) [ 1674.321734] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.347564] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.375548] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.409839] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 05:00:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1674.436739] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.459296] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.484632] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.505197] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.522681] hid-generic 0000:0000:0000.0196: unknown main item tag 0x0 [ 1674.531470] hid-generic 0000:0000:0000.0196: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:28 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:28 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x11000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:28 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(0xffffffffffffffff, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:28 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x14000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 1675.156948] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.174084] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.190111] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.245606] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.276431] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 05:00:28 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1675.303689] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.327903] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.335445] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.342279] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.358105] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.376265] hid-generic 0000:0000:0000.0197: unknown main item tag 0x0 [ 1675.412332] hid-generic 0000:0000:0000.0197: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:29 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:29 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x28000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1675.949557] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1675.966450] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 05:00:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 05:00:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1675.989854] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.012477] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.021715] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 05:00:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1676.048129] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.093257] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.100348] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.136943] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.158948] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.190355] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.192839] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.227032] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 05:00:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x40000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) [ 1676.243763] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.262130] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.271466] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.280045] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.304669] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.336170] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.337331] hid-generic 0000:0000:0000.0198: unknown main item tag 0x0 [ 1676.366964] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 [ 1676.399709] hid-generic 0000:0000:0000.0198: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1676.414569] hid-generic 0000:0000:0000.0199: unknown main item tag 0x0 05:00:29 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) flock(r1, 0x8) [ 1676.460273] hid-generic 0000:0000:0000.0199: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 05:00:29 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x43050000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 05:00:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) flock(r1, 0x8) [ 1676.633981] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1676.640708] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1676.741058] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 05:00:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x60000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1676.791980] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 05:00:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) flock(r1, 0x8) [ 1676.851211] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1676.881469] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1676.916633] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1676.958717] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1676.990169] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1677.032222] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 [ 1677.063501] hid-generic 0000:0000:0000.019A: unknown main item tag 0x0 05:00:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, r0) 05:00:30 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) [ 1677.091741] hid-generic 0000:0000:0000.019A: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:30 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e0000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27) flock(0xffffffffffffffff, 0x8) 05:00:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) [ 1677.246741] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.264904] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 05:00:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27) flock(0xffffffffffffffff, 0x8) 05:00:30 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x80350000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1677.308496] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.373912] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.434676] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 05:00:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) [ 1677.478287] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.513033] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 05:00:30 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1677.536105] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.567320] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.614626] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.650913] hid-generic 0000:0000:0000.019B: unknown main item tag 0x0 [ 1677.685102] hid-generic 0000:0000:0000.019B: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1677.694784] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1677.701491] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 05:00:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) dup2(r1, r0) 05:00:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27) flock(0xffffffffffffffff, 0x8) 05:00:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:30 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x81000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:30 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xf0ffff) [ 1677.744911] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1677.783864] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1677.845477] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1677.877145] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 05:00:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) 05:00:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:31 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x86ddffff, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1677.908875] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1677.955017] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1677.989923] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 05:00:31 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:31 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xf0ffff) 05:00:31 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) dup2(r1, r0) [ 1678.025977] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 05:00:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) 05:00:31 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88470000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1678.025998] hid-generic 0000:0000:0000.019C: unknown main item tag 0x0 [ 1678.042699] hid-generic 0000:0000:0000.019C: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:31 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, 0x0, 0x0) dup2(r1, r0) 05:00:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:31 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x2e2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, 0x0, 0x0, 0x10400003) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) sendfile(r1, r3, 0x0, 0x100000000) sendfile(r1, r3, 0x0, 0x20020102000007) dup2(r3, r2) [ 1678.208027] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.229024] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 05:00:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) [ 1678.276847] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.330554] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 05:00:31 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:31 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) [ 1678.377818] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.406786] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 05:00:31 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88480000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1678.432772] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.457518] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.494830] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.531458] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 05:00:31 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:31 executing program 2: ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) 05:00:31 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:31 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:31 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88640000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1678.550376] hid-generic 0000:0000:0000.019D: unknown main item tag 0x0 [ 1678.580441] hid-generic 0000:0000:0000.019D: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1678.658693] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 05:00:31 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) 05:00:31 executing program 2: ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) [ 1678.695990] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.696012] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 05:00:31 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88a8ffff, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1678.696032] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.696051] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 05:00:32 executing program 2: ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) [ 1678.696072] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 05:00:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r0) [ 1678.696091] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.696110] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.696130] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.696149] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.696168] hid-generic 0000:0000:0000.019E: unknown main item tag 0x0 [ 1678.699827] hid-generic 0000:0000:0000.019E: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1678.784022] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784044] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784064] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 05:00:32 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) 05:00:32 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88caffff, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1678.784083] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784102] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784121] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784140] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784159] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784179] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784198] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.784217] hid-generic 0000:0000:0000.019F: unknown main item tag 0x0 [ 1678.785782] hid-generic 0000:0000:0000.019F: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1678.877288] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877308] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877328] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877346] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877365] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 05:00:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) 05:00:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x89060000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1678.877384] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877404] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877424] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877444] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877462] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.877481] hid-generic 0000:0000:0000.01A0: unknown main item tag 0x0 [ 1678.879769] hid-generic 0000:0000:0000.01A0: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:32 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1679.366230] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.403501] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 05:00:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) flock(r0, 0x8) 05:00:32 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffa888, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1679.439149] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.476164] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.510941] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.565386] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.591644] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.603529] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.610684] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.617772] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.637396] hid-generic 0000:0000:0000.01A1: unknown main item tag 0x0 [ 1679.649023] hid-generic 0000:0000:0000.01A1: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) 05:00:32 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1679.677140] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.695060] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.712000] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.778990] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.813499] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 05:00:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1679.829887] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1679.833916] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.846920] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.851132] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1679.862623] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 05:00:33 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffca88, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1679.874917] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1679.908376] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1679.909902] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.945377] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1679.973943] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1679.979004] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1680.000676] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1680.004188] hid-generic 0000:0000:0000.01A2: unknown main item tag 0x0 [ 1680.015647] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 05:00:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1680.045017] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1680.053183] hid-generic 0000:0000:0000.01A2: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1680.069067] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 [ 1680.089011] hid-generic 0000:0000:0000.01A3: unknown main item tag 0x0 05:00:33 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1680.117893] hid-generic 0000:0000:0000.01A3: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) 05:00:33 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffdd86, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1680.302474] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.342132] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 05:00:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1680.365147] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.402250] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 05:00:33 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfffff000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1680.435211] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.467300] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 05:00:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1680.501910] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.529471] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 05:00:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:33 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29ae", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1680.547233] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.555233] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.562847] hid-generic 0000:0000:0000.01A4: unknown main item tag 0x0 [ 1680.577037] hid-generic 0000:0000:0000.01A4: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1680.626543] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.653319] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.681951] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.699946] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.713078] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.720682] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 05:00:33 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xf0ffffffffffff, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1680.728017] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.759779] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.777197] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.788327] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.810136] hid-generic 0000:0000:0000.01A5: unknown main item tag 0x0 [ 1680.810244] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 05:00:34 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:34 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r0, &(0x7f00000002c0)=""/169, 0xa9) dup2(r1, 0xffffffffffffffff) 05:00:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1680.856792] hid-generic 0000:0000:0000.01A5: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1680.863481] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1680.888404] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1680.924144] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1680.930930] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1680.930950] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 05:00:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x100000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1681.027302] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 05:00:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1681.083681] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1681.090401] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1681.090423] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 [ 1681.090441] hid-generic 0000:0000:0000.01A6: unknown main item tag 0x0 05:00:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:34 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29ae", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1681.243040] hid-generic 0000:0000:0000.01A6: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1681.271664] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.278490] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 05:00:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x200000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:34 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1681.289504] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.296333] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.303019] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.309757] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.316717] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.323414] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.330262] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.337008] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 05:00:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1681.345635] hid-generic 0000:0000:0000.01A7: unknown main item tag 0x0 [ 1681.384273] hid-generic 0000:0000:0000.01A7: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c12") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1681.502610] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 [ 1681.539039] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 05:00:34 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1681.560818] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 05:00:34 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x300000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1681.608158] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 05:00:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1681.659274] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 [ 1681.704409] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 [ 1681.711117] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 [ 1681.741022] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 05:00:34 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c12") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1681.763043] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 05:00:34 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29ae", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:34 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1681.807626] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 05:00:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x600000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1681.807648] hid-generic 0000:0000:0000.01A8: unknown main item tag 0x0 [ 1681.823182] hid-generic 0000:0000:0000.01A8: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1681.962746] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 [ 1681.975496] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 05:00:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c12") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1682.031192] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 05:00:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x700000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1682.083884] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 05:00:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1682.128059] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 [ 1682.153747] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 05:00:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1682.193179] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 [ 1682.231741] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 [ 1682.277136] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 [ 1682.312872] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 [ 1682.330415] hid-generic 0000:0000:0000.01A9: unknown main item tag 0x0 05:00:35 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1682.379215] hid-generic 0000:0000:0000.01A9: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x806000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1682.598840] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.641064] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.697486] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.718090] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 05:00:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1682.751235] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.773648] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.822964] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.850819] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 05:00:36 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xb00000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1682.870492] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.878176] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.884972] hid-generic 0000:0000:0000.01AA: unknown main item tag 0x0 [ 1682.892377] hid-generic 0000:0000:0000.01AA: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:36 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd00000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1683.085583] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 05:00:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:36 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1683.148051] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.182689] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.213053] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.246690] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.253402] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.296606] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.324883] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 05:00:36 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1000000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1683.351359] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.364181] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.370953] hid-generic 0000:0000:0000.01AB: unknown main item tag 0x0 [ 1683.381079] hid-generic 0000:0000:0000.01AB: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1100000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:36 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1683.523193] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.557262] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.600140] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 05:00:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x8) [ 1683.645758] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.676421] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.721428] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.752241] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.795536] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.813001] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.828770] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 [ 1683.836020] hid-generic 0000:0000:0000.01AC: unknown main item tag 0x0 05:00:37 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1400000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x27) flock(r1, 0x8) [ 1683.844139] hid-generic 0000:0000:0000.01AC: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:37 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2000000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1684.008979] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.044513] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 05:00:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x27) flock(r1, 0x8) 05:00:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1684.097029] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.131630] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.181944] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.210514] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.245217] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.269735] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 05:00:37 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2800000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x27) flock(r1, 0x8) [ 1684.289081] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.297860] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.305186] hid-generic 0000:0000:0000.01AD: unknown main item tag 0x0 [ 1684.312570] hid-generic 0000:0000:0000.01AD: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f00000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1684.483244] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.503828] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 05:00:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x27) flock(r1, 0x8) [ 1684.535963] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 05:00:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1684.591009] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.617542] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.644799] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.675250] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.701659] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.716098] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.735027] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 [ 1684.749055] hid-generic 0000:0000:0000.01AE: unknown main item tag 0x0 05:00:37 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:37 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4000000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x27) flock(r1, 0x8) 05:00:37 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1684.773510] hid-generic 0000:0000:0000.01AE: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4305000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x27) flock(r1, 0x8) 05:00:38 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) [ 1684.942454] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1684.961192] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 05:00:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1685.027112] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.056045] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.088041] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.112589] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.132565] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.159153] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.181688] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.193396] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 [ 1685.202320] hid-generic 0000:0000:0000.01AF: unknown main item tag 0x0 05:00:38 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) flock(r1, 0x8) 05:00:38 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) 05:00:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1685.232285] hid-generic 0000:0000:0000.01AF: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:38 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, 0x0, 0x0) 05:00:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) flock(r1, 0x8) 05:00:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1685.409117] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.430181] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498109] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 05:00:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) flock(r1, 0x8) [ 1685.498131] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498158] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498595] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498616] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498635] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498655] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498710] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.498729] hid-generic 0000:0000:0000.01B0: unknown main item tag 0x0 [ 1685.505206] hid-generic 0000:0000:0000.01B0: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:38 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:38 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, 0x0, 0x0) 05:00:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(0xffffffffffffffff, 0x8) 05:00:38 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, 0x0, 0x0) 05:00:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(0xffffffffffffffff, 0x8) 05:00:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8100000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1685.864859] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.871608] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.929626] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.929648] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.929675] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.929878] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.929899] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.929926] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.930118] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.930140] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 [ 1685.930160] hid-generic 0000:0000:0000.01B1: unknown main item tag 0x0 05:00:39 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[], 0x0) [ 1686.267247] hid-generic 0000:0000:0000.01B1: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:39 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x86ddffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(0xffffffffffffffff, 0x8) 05:00:39 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[], 0x0) 05:00:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x0) 05:00:39 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[], 0x0) 05:00:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8847000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1686.487533] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.519355] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.562114] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 05:00:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1686.605615] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.652248] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.686304] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.716679] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.749790] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 05:00:39 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:39 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) 05:00:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x0) 05:00:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8848000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1686.762011] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.772024] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.781966] hid-generic 0000:0000:0000.01B2: unknown main item tag 0x0 [ 1686.800265] hid-generic 0000:0000:0000.01B2: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:40 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8864000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) 05:00:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) flock(r1, 0x0) 05:00:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1686.951934] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1686.988946] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 05:00:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1687.055249] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.086766] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.120952] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.158505] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 05:00:40 executing program 2: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:40 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88a8ffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:40 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) [ 1687.188051] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.199902] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.199922] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.222145] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 05:00:40 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88caffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1687.222166] hid-generic 0000:0000:0000.01B3: unknown main item tag 0x0 [ 1687.226118] hid-generic 0000:0000:0000.01B3: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1687.340068] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.352187] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 05:00:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) [ 1687.374197] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.384434] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.391129] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.407481] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 05:00:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1687.432419] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.449375] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 05:00:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1687.487386] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.498128] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.515400] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.545345] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.554737] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.577727] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.581772] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 05:00:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) 05:00:40 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8906000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1687.598843] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.610878] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.636263] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 05:00:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1687.648418] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.661975] hid-generic 0000:0000:0000.01B4: unknown main item tag 0x0 [ 1687.689061] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.731104] hid-generic 0000:0000:0000.01B4: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1687.734453] hid-generic 0000:0000:0000.01B5: unknown main item tag 0x0 [ 1687.806569] hid-generic 0000:0000:0000.01B5: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) 05:00:41 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:41 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfffffffffffff000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 05:00:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) [ 1688.111514] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.156608] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.163407] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 05:00:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1688.229190] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.229212] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.229232] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.229284] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.229303] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 05:00:41 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:41 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1688.229323] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.229343] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.229363] hid-generic 0000:0000:0000.01B6: unknown main item tag 0x0 [ 1688.249004] hid-generic 0000:0000:0000.01B6: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 05:00:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) 05:00:41 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1688.500594] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.526802] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.585999] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 05:00:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 05:00:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) [ 1688.631563] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.690634] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.726473] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.751689] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 05:00:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:41 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1688.792918] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.816878] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.837498] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 [ 1688.863301] hid-generic 0000:0000:0000.01B7: unknown main item tag 0x0 05:00:42 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:42 executing program 4: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:42 executing program 5: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x11000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1688.904931] hid-generic 0000:0000:0000.01B7: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 4: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1689.025069] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:00:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1689.124450] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.131172] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 05:00:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1689.177783] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 05:00:42 executing program 4: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 5: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x88480000, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1689.227362] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.271915] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.322199] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.354840] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.361561] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.374487] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.398062] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 05:00:42 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x7, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 4: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) dup2(0xffffffffffffffff, r1) [ 1689.421157] hid-generic 0000:0000:0000.01B8: unknown main item tag 0x0 [ 1689.435052] hid-generic 0000:0000:0000.01B8: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:42 executing program 4: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1689.531735] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 05:00:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000"], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1689.575965] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.582686] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 05:00:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:42 executing program 4: socket$inet6(0xa, 0x40080000000001, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1689.653515] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.688861] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 05:00:42 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1689.724113] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.757785] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.789724] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.822716] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 05:00:43 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:43 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:43 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1689.846387] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.867497] hid-generic 0000:0000:0000.01B9: unknown main item tag 0x0 [ 1689.902754] hid-generic 0000:0000:0000.01B9: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:43 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:43 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:43 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 05:00:43 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:43 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:43 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:43 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 05:00:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:43 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x10, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1690.396855] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.407897] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.411541] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.443509] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.447968] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.507728] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.509333] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.540737] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 05:00:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1690.560033] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.600990] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.626888] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.633965] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.668315] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.689587] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.707154] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.726786] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.733508] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.773005] hid-generic 0000:0000:0000.01BA: unknown main item tag 0x0 [ 1690.793699] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.800425] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.801428] hid-generic 0000:0000:0000.01BA: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1690.812385] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.823766] hid-generic 0000:0000:0000.01BB: unknown main item tag 0x0 [ 1690.853455] hid-generic 0000:0000:0000.01BB: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:44 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:44 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 05:00:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:44 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:44 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x14, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1691.251142] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.283787] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.325715] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.353989] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.371568] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.376935] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 05:00:44 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1691.419709] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.448628] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.449757] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 05:00:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x28, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1691.483469] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.492192] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.506624] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.528791] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.554156] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.559540] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.582225] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.597832] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.606485] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.609033] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.627021] hid-generic 0000:0000:0000.01BC: unknown main item tag 0x0 [ 1691.639103] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.651145] hid-generic 0000:0000:0000.01BC: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1691.652791] hid-generic 0000:0000:0000.01BD: unknown main item tag 0x0 [ 1691.698186] hid-generic 0000:0000:0000.01BD: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:45 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 05:00:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:45 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:45 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:45 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x60, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 05:00:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:45 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1692.237318] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.274134] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.280877] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 05:00:45 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1692.342553] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 05:00:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$capi20_data(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000"], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 05:00:45 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) [ 1692.423729] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.481735] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.541003] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.563159] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.573523] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.585910] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.592623] hid-generic 0000:0000:0000.01BE: unknown main item tag 0x0 [ 1692.610080] hid-generic 0000:0000:0000.01BE: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1692.640646] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.666430] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.699649] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.715962] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.722679] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.724926] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.756284] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.763027] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.790022] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.802214] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.805522] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.816258] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.823330] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.831133] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.838603] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.851108] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.857966] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.860722] hid-generic 0000:0000:0000.01BF: unknown main item tag 0x0 [ 1692.865114] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.865133] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.865152] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.892713] hid-generic 0000:0000:0000.01C0: unknown main item tag 0x0 [ 1692.908966] hid-generic 0000:0000:0000.01BF: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1692.918778] hid-generic 0000:0000:0000.01C0: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:46 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:46 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:46 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:46 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:46 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x543, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1693.176338] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.183065] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.219575] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.286413] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.308160] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 05:00:46 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x600, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:46 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) [ 1693.335558] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.351707] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 05:00:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1693.377868] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.415339] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.455594] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 [ 1693.476880] hid-generic 0000:0000:0000.01C1: unknown main item tag 0x0 05:00:46 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) [ 1693.505368] hid-generic 0000:0000:0000.01C1: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:46 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1693.666085] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.672821] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.698609] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.709569] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.730962] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.731025] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.778420] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.778925] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.808652] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.810460] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.822199] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.822220] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.841690] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.849040] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.861827] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.869345] hid-generic 0000:0000:0000.01C3: unknown main item tag 0x0 [ 1693.879012] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.891549] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.902941] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.916703] hid-generic 0000:0000:0000.01C3: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1693.916924] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.950685] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.958104] hid-generic 0000:0000:0000.01C2: unknown main item tag 0x0 [ 1693.981157] hid-generic 0000:0000:0000.01C2: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:47 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) 05:00:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x608, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:47 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) 05:00:47 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x689, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1694.144045] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.151114] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.164083] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.170860] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.182140] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.186360] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.199552] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.227358] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.256448] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.269859] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 05:00:47 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1694.309502] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.314518] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.340184] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 05:00:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1694.360052] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.376380] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 05:00:47 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) 05:00:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x700, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1694.403064] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.410239] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.432515] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.439341] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 [ 1694.439362] hid-generic 0000:0000:0000.01C4: unknown main item tag 0x0 05:00:47 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1694.471244] hid-generic 0000:0000:0000.01C4: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1694.531264] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.545802] hid-generic 0000:0000:0000.01C5: unknown main item tag 0x0 [ 1694.586753] hid-generic 0000:0000:0000.01C5: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1694.606188] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.612897] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.648164] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.686521] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.716956] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.738951] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.757207] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.767045] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.774765] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.781742] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.789259] hid-generic 0000:0000:0000.01C6: unknown main item tag 0x0 [ 1694.811001] hid-generic 0000:0000:0000.01C6: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1694.836729] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.849216] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.864119] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.873338] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.886387] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.893195] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.900418] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 05:00:48 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) 05:00:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:48 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x806, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:48 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:00:48 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1694.946218] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.952967] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1694.988520] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 [ 1695.017384] hid-generic 0000:0000:0000.01C7: unknown main item tag 0x0 05:00:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:48 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1695.037354] hid-generic 0000:0000:0000.01C7: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1695.132090] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.218156] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 05:00:48 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:00:48 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1695.268396] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.318082] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.382231] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.418834] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 05:00:48 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) 05:00:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1695.441203] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.448453] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.455849] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.463951] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.471602] hid-generic 0000:0000:0000.01C8: unknown main item tag 0x0 [ 1695.539766] hid-generic 0000:0000:0000.01C8: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:48 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x0, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1695.684411] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.691137] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.743911] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 05:00:48 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) 05:00:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:48 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) 05:00:48 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xe80, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1695.788400] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.797265] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.812149] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.819776] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.856342] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 05:00:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1695.903452] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 05:00:49 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) [ 1695.952849] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1695.955107] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1695.986792] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 05:00:49 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x0, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1696.016482] hid-generic 0000:0000:0000.01C9: unknown main item tag 0x0 [ 1696.037771] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.072417] hid-generic 0000:0000:0000.01C9: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1696.079313] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 05:00:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1696.120756] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.151459] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.192724] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.224933] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.263098] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.289540] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.325380] hid-generic 0000:0000:0000.01CA: unknown main item tag 0x0 [ 1696.372315] hid-generic 0000:0000:0000.01CA: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:49 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) 05:00:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:49 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) 05:00:49 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) 05:00:49 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x0, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2800, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1696.663002] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1696.686928] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1696.753300] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1696.786071] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1696.793477] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 05:00:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:50 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3580, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1696.820231] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1696.822570] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1696.838091] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1696.867470] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1696.882379] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 05:00:50 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) [ 1696.911831] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1696.928089] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 05:00:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1696.957904] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1696.970877] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1697.002024] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1697.014174] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1697.031456] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1697.047197] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1697.059642] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1697.086214] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1697.090389] hid-generic 0000:0000:0000.01CB: unknown main item tag 0x0 [ 1697.102210] hid-generic 0000:0000:0000.01CC: unknown main item tag 0x0 [ 1697.121728] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.130391] hid-generic 0000:0000:0000.01CC: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1697.139760] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.152296] hid-generic 0000:0000:0000.01CB: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1697.185347] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.268209] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.275318] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.282087] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.288912] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.295732] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.302501] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.309579] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.316541] hid-generic 0000:0000:0000.01CD: unknown main item tag 0x0 [ 1697.324207] hid-generic 0000:0000:0000.01CD: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:50 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:50 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f00, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:50 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) 05:00:50 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:50 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) 05:00:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1697.616185] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.622909] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 05:00:50 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1697.662731] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.672875] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 05:00:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1697.716873] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.751642] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 05:00:50 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) [ 1697.794518] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 05:00:51 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4305, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:51 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1697.838723] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.871334] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.902059] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.934720] hid-generic 0000:0000:0000.01CE: unknown main item tag 0x0 [ 1697.959425] hid-generic 0000:0000:0000.01CE: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1698.027626] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.035285] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.041981] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.070904] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.087775] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.091008] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.108185] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.117562] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.128707] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.139057] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.150373] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.176389] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.177827] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.230915] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.241217] hid-generic 0000:0000:0000.01D0: unknown main item tag 0x0 [ 1698.264314] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 05:00:51 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(0x0, 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:51 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4788, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1698.290480] hid-generic 0000:0000:0000.01D0: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1698.292868] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.306185] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.321743] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.330059] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.341683] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.358694] hid-generic 0000:0000:0000.01CF: unknown main item tag 0x0 [ 1698.378398] hid-generic 0000:0000:0000.01CF: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1698.469974] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.498761] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.511235] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.530529] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.542336] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.550382] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.562154] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.570219] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.582365] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.590389] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 [ 1698.603072] hid-generic 0000:0000:0000.01D1: unknown main item tag 0x0 05:00:51 executing program 5: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) 05:00:51 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005e0000006214325b74fa41edb650990a5e5bf8d03e009422986a8ebc989633104bbdabbee2b55f79dfa82b3cb518166584229693d7656443d0c9e5bd0400ad83053b9075220eeba65f9b030f0748694ab17026e6726224e3b7b83e00c96e0db5b07f"], 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 05:00:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:51 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:51 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4888, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1698.633061] hid-generic 0000:0000:0000.01D1: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:51 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:52 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1698.808680] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1698.829406] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1698.848943] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1698.880070] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1698.880790] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1698.914643] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1698.916665] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 05:00:52 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005e0000006214325b74fa41edb650990a5e5bf8d03e009422986a8ebc989633104bbdabbee2b55f79dfa82b3cb518166584229693d7656443d0c9e5bd0400ad83053b9075220eeba65f9b030f0748694ab17026e6726224e3b7b83e00c96e0db5b07f"], 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) [ 1698.967773] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1698.972083] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1698.985777] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 05:00:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1699.019229] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.032058] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1699.047614] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.056748] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 05:00:52 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6488, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1699.077804] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1699.078027] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.114274] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.123077] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 [ 1699.134938] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.159179] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.159742] hid-generic 0000:0000:0000.01D2: unknown main item tag 0x0 05:00:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1699.191250] hid-generic 0000:0000:0000.01D3: unknown main item tag 0x0 [ 1699.224643] hid-generic 0000:0000:0000.01D2: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1699.250073] hid-generic 0000:0000:0000.01D3: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:52 executing program 5: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8005) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRESOCT]) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000380)={0x1, 0x9, 0x5}) syncfs(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl(r0, 0x100000001, &(0x7f0000000080)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000400)={0x9, 0x3, 0x5}) ustat(0x9, &(0x7f0000000040)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', 0x0, 0x10}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file1\x00', 0x0, 0x8}, 0x10) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000002c0)=0x5) 05:00:52 executing program 1: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005e0000006214325b74fa41edb650990a5e5bf8d03e009422986a8ebc989633104bbdabbee2b55f79dfa82b3cb518166584229693d7656443d0c9e5bd0400ad83053b9075220eeba65f9b030f0748694ab17026e6726224e3b7b83e00c96e0db5b07f"], 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 05:00:52 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:52 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800e, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:52 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005e0000006214325b74fa41edb650990a5e5bf8d03e009422986a8ebc989633104bbdabbee2b55f79dfa82b3cb518166584229693d7656443d0c9e5bd0400ad83053b9075220eeba65f9b030f0748694ab17026e6726224e3b7b83e00c96e0db5b07f"], 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff4d) 05:00:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:52 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8035, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1699.702741] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.703037] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1699.732063] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.753007] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1699.773930] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.799889] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.825559] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.826536] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1699.836729] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.849345] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 05:00:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1699.880319] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.890996] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1699.919133] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 05:00:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8100, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1699.919722] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.941269] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1699.961019] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1699.989693] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1700.000369] hid-generic 0000:0000:0000.01D4: unknown main item tag 0x0 [ 1700.021055] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 05:00:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1700.033229] hid-generic 0000:0000:0000.01D4: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1700.050235] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 05:00:53 executing program 5: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty=[0x0, 0xf0ffffffffffff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1700.080741] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1700.103535] hid-generic 0000:0000:0000.01D5: unknown main item tag 0x0 [ 1700.154141] hid-generic 0000:0000:0000.01D5: hidraw3: HID v0.00 Device [syz1] on syz1 05:00:53 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8847, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1700.357390] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.386559] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.393278] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.444030] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.450750] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 05:00:53 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005e0000006214325b74fa41edb650990a5e5bf8d03e009422986a8ebc989633104bbdabbee2b55f79dfa82b3cb518166584229693d7656443d0c9e5bd0400ad83053b9075220eeba65f9b030f0748694ab17026e6726224e3b7b83e00c96e0db5b07f"], 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff4d) 05:00:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:00:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:00:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8848, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:53 executing program 5: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fallocate(r0, 0xffffffeffffffffe, 0x10000000, 0x8005) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r2) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x20001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) ioctl(r0, 0x100000001, &(0x7f0000000080)) [ 1700.513706] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.557010] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.596582] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 05:00:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 05:00:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8864, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1700.624908] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 05:00:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1700.690530] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.721269] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.731165] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.745254] hid-generic 0000:0000:0000.01D6: unknown main item tag 0x0 [ 1700.791172] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.820169] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.824329] hid-generic 0000:0000:0000.01D6: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 05:00:54 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:54 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x2, 0x4f0d, 0x40}}) write$vhci(r0, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "8f"}, 0x2) 05:00:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8906, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1700.847645] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.884728] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.934742] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.971466] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.990312] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1700.998642] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1701.007082] hid-generic 0000:0000:0000.01D7: unknown main item tag 0x0 [ 1701.020864] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.047553] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.056498] hid-generic 0000:0000:0000.01D7: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1701.069348] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.106324] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.118111] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.127840] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.149328] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.160637] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.169869] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.181398] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.191253] hid-generic 0000:0000:0000.01D8: unknown main item tag 0x0 [ 1701.223247] hid-generic 0000:0000:0000.01D8: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:54 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r7 = socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005e0000006214325b74fa41edb650990a5e5bf8d03e009422986a8ebc989633104bbdabbee2b55f79dfa82b3cb518166584229693d7656443d0c9e5bd0400ad83053b9075220eeba65f9b030f0748694ab17026e6726224e3b7b83e00c96e0db5b07f"], 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x811af15e52ff62ec, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff4d) 05:00:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 05:00:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:00:54 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, &(0x7f0000000280)) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf0ffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1701.408146] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.424763] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.446912] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 05:00:54 executing program 2: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1701.450040] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.469809] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.484398] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.498134] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 05:00:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1701.515290] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.516259] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.534507] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.541297] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.549088] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.557644] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.583763] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.596333] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.597053] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.619479] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.630143] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.652316] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.660080] hid-generic 0000:0000:0000.01DA: unknown main item tag 0x0 [ 1701.665400] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.678252] hid-generic 0000:0000:0000.01D9: unknown main item tag 0x0 [ 1701.696866] hid-generic 0000:0000:0000.01DA: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1701.721620] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.724057] hid-generic 0000:0000:0000.01D9: hidraw3: HID v0.00 Device [syz1] on syz1 [ 1701.752228] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.799191] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.844411] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.851209] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.865223] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.872116] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.879372] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.886656] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.893341] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.900462] hid-generic 0000:0000:0000.01DB: unknown main item tag 0x0 [ 1701.916314] hid-generic 0000:0000:0000.01DB: hidraw2: HID v0.00 Device [syz1] on syz1 05:00:56 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, &(0x7f0000000280)) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:00:56 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:00:56 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1703.909184] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.917208] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.924068] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.930745] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.945158] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.951862] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.958628] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.965836] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.972552] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.979469] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.986406] hid-generic 0000:0000:0000.01DC: unknown main item tag 0x0 [ 1703.994547] hid-generic 0000:0000:0000.01DC: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:04 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x2, 0x4f0d, 0x40}}) write$vhci(r0, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "8f"}, 0x2) 05:01:04 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/67, &(0x7f0000000180)=0x43) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r3, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) write$vhci(r3, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "8f"}, 0x2) 05:01:04 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0xfffffffffffffd1a) fcntl$addseals(r1, 0x409, 0x5) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) socket$alg(0x26, 0x5, 0x0) 05:01:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:04 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, &(0x7f0000000280)) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:04 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1711.337133] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.356310] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 05:01:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1711.382105] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.397071] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.404386] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.411360] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.428388] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 05:01:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x7000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:04 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1711.458662] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.468010] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.475991] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.483393] hid-generic 0000:0000:0000.01DD: unknown main item tag 0x0 [ 1711.491646] hid-generic 0000:0000:0000.01DD: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8060000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1711.622025] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.645254] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.653020] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 05:01:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1711.677962] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.688701] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.698683] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.710121] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.722107] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.729533] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.737259] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.744863] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 1711.764207] hid-generic 0000:0000:0000.01DE: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x2, 0x4f0d, 0x40}}) write$vhci(r0, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "8f"}, 0x2) 05:01:14 executing program 4: futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = getpgrp(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 05:01:15 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0xfffffffffffffd1a) fcntl$addseals(r1, 0x409, 0x5) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) socket$alg(0x26, 0x5, 0x0) 05:01:15 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:15 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:15 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:15 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8202, 0x0) read(r0, &(0x7f00000001c0)=""/99, 0x63) write$P9_RREAD(r0, 0x0, 0x0) 05:01:15 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000001) 05:01:16 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x10000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1722.863106] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1722.877172] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1722.901437] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1722.916518] audit: type=1400 audit(1552021276.077:97): avc: denied { dyntransition } for pid=1901 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 [ 1722.952407] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 05:01:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) 05:01:16 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1722.970751] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1722.995478] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1723.034135] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1723.054043] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1723.067767] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1723.101891] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1723.120601] hid-generic 0000:0000:0000.01DF: unknown main item tag 0x0 [ 1723.148012] hid-generic 0000:0000:0000.01DF: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:24 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x2, 0x4f0d, 0x40}}) 05:01:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x11000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:27 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0xfffffffffffffd1a) fcntl$addseals(r1, 0x409, 0x5) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) socket$alg(0x26, 0x5, 0x0) 05:01:27 executing program 4: clone(0x802002001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x380000000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:01:27 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x14000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x20000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1734.300441] audit: type=1400 audit(1552021287.457:98): avc: denied { map } for pid=2030 comm="syz-executor.4" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1105 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 05:01:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x28000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1734.349756] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.364897] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.372520] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.383137] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.390034] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 05:01:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1734.400127] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.409949] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.416928] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.424165] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.431024] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 [ 1734.443702] hid-generic 0000:0000:0000.01E0: unknown main item tag 0x0 05:01:27 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x40000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:27 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x0, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1734.457976] hid-generic 0000:0000:0000.01E0: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1734.576964] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.583858] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.590521] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.603332] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.610074] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.616777] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.623434] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.630145] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.636925] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.643717] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.650505] hid-generic 0000:0000:0000.01E1: unknown main item tag 0x0 [ 1734.658563] hid-generic 0000:0000:0000.01E1: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) pipe(&(0x7f0000000080)) 05:01:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x43050000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:38 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0xfffffffffffffd1a) fcntl$addseals(r1, 0x409, 0x5) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:01:38 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x0, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:38 executing program 4: clone(0x802002001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x380000000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:01:38 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x60000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800e0000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:39 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0xfffffffffffffd1a) fcntl$addseals(r1, 0x409, 0x5) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:01:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x80350000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x81000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1745.879578] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.891552] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.912441] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 05:01:39 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x86ddffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1745.925167] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.932043] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.944936] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.955831] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.962609] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.970791] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.977539] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.977553] hid-generic 0000:0000:0000.01E2: unknown main item tag 0x0 [ 1745.994762] hid-generic 0000:0000:0000.01E2: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:01:45 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88470000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:45 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x0, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:45 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:45 executing program 4: clone(0x802002001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x380000000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:01:45 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88480000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:45 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88640000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:45 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88a8ffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1752.284627] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.291352] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.310795] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.321462] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.328388] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.342096] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.351116] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.361177] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.368186] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.383723] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.390424] hid-generic 0000:0000:0000.01E3: unknown main item tag 0x0 [ 1752.400982] hid-generic 0000:0000:0000.01E3: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:49 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0xfffffffffffffd1a) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:01:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88caffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:49 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:49 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1756.128092] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.135349] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.142025] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.148828] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.155851] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.162512] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.169251] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.175961] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.182630] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.189357] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.196098] hid-generic 0000:0000:0000.01E4: unknown main item tag 0x0 [ 1756.203394] hid-generic 0000:0000:0000.01E4: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:01:55 executing program 4: clone(0x802002001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x380000000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:01:55 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:55 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x89060000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:55 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:55 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffa888, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:55 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:55 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1762.532877] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.543106] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.559822] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.570011] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.580361] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.590706] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.597794] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.605057] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.611826] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.618783] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.655432] hid-generic 0000:0000:0000.01E5: unknown main item tag 0x0 [ 1762.662620] hid-generic 0000:0000:0000.01E5: hidraw2: HID v0.00 Device [syz1] on syz1 05:01:59 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fff, 0x60100) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:01:59 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffca88, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:59 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:59 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:01:59 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:01:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8202, 0x0) write$P9_RREAD(r1, 0x0, 0x0) 05:01:59 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffdd86, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:59 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1ff, 0x0) 05:01:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000100)=[@register_looper, @decrefs={0x40046307, 0x1}], 0x48, 0x0, &(0x7f0000000140)="51bbb0dba18652c455b611bc0c6182f0471a5cda8e3c60cb9b5c66ddf44a8f1ec71a306c22ec9bd4342907b8cccca93e99e595692fb17cfd478a08ab453d0cfc2256966db383b136"}) 05:01:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) [ 1766.370276] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.381635] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.394235] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.404091] binder: 2938:2939 ERROR: BC_REGISTER_LOOPER called without request [ 1766.412160] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 05:01:59 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:01:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) [ 1766.419575] binder: 2938:2939 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 1766.428437] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.443491] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.450567] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.457714] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.508597] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.526069] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.540567] hid-generic 0000:0000:0000.01E6: unknown main item tag 0x0 [ 1766.558282] hid-generic 0000:0000:0000.01E6: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1766.569372] binder: 2938:2939 tried to acquire reference to desc 0, got 1 instead [ 1766.570886] binder: 2938:3059 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1766.587143] binder: 2938:3060 ERROR: BC_REGISTER_LOOPER called without request [ 1766.597351] binder: 2938 invalid dec weak, ref 6 desc 1 s 1 w 0 05:02:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xf0ffffffffffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) 05:02:09 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = dup3(r3, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) sendmsg$nl_xfrm(r4, 0x0, 0x90) 05:02:09 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:09 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:09 executing program 1: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) 05:02:09 executing program 1: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) [ 1776.602691] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.620816] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.640738] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 05:02:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x200000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1776.661245] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.680957] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 05:02:09 executing program 1: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) 05:02:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d7"], 0x0, 0x0, 0x0) [ 1776.707951] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.716801] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.726748] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.740604] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.764716] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.772431] hid-generic 0000:0000:0000.01E7: unknown main item tag 0x0 [ 1776.783311] hid-generic 0000:0000:0000.01E7: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:19 executing program 2: write$vhci(0xffffffffffffffff, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:19 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:19 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x300000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:19 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/220, 0xdc) 05:02:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) 05:02:19 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/220, 0xdc) 05:02:19 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0xc009, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x140) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 05:02:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x600000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:20 executing program 2: write$vhci(0xffffffffffffffff, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1786.839720] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1786.866740] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 05:02:20 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/220, 0xdc) 05:02:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x700000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1786.894771] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1786.919582] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 05:02:20 executing program 2: write$vhci(0xffffffffffffffff, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1786.971239] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1786.996334] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1787.016109] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1787.052943] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1787.067513] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1787.074949] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 [ 1787.081629] hid-generic 0000:0000:0000.01E8: unknown main item tag 0x0 05:02:20 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:20 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000080)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 05:02:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1787.095484] hid-generic 0000:0000:0000.01E8: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:20 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:20 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x806000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x7bb, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r0, r1, 0x0) ioctl$BLKROGET(r1, 0x125e, 0x0) [ 1787.311585] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.342319] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.349891] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.356835] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.365931] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.373920] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.380608] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.387585] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.402408] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 05:02:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:20 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:20 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:20 executing program 4: [ 1787.409381] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.421925] hid-generic 0000:0000:0000.01E9: unknown main item tag 0x0 [ 1787.437568] hid-generic 0000:0000:0000.01E9: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:20 executing program 4: 05:02:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xd00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:20 executing program 4: 05:02:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:20 executing program 4: [ 1787.644400] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.651566] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.682950] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.706814] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.715172] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.722013] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.733441] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.748571] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.755388] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.762062] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.768782] hid-generic 0000:0000:0000.01EA: unknown main item tag 0x0 [ 1787.776280] hid-generic 0000:0000:0000.01EA: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:21 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:21 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:21 executing program 4: 05:02:21 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:21 executing program 4: 05:02:21 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:21 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:21 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:21 executing program 4: 05:02:21 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1788.400268] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.419033] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.458919] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.490089] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.514877] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.528957] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.541739] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.551336] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.558298] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.567950] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.574677] hid-generic 0000:0000:0000.01EB: unknown main item tag 0x0 [ 1788.581965] hid-generic 0000:0000:0000.01EB: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:22 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:22 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:22 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:02:22 executing program 4: 05:02:22 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r2, &(0x7f00000002c0)=""/169, 0xa9) r4 = dup2(r3, r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, 0x0, 0x0) 05:02:22 executing program 4: 05:02:22 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100), 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1789.287962] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.308305] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.349208] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.364222] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.377789] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.390742] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 05:02:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, 0x0, 0x0) 05:02:22 executing program 4: [ 1789.414698] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.454153] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.483550] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.509429] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.527587] hid-generic 0000:0000:0000.01EC: unknown main item tag 0x0 [ 1789.553083] hid-generic 0000:0000:0000.01EC: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:23 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:23 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100), 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:23 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x2800000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:23 executing program 4: 05:02:23 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, 0x0, 0x0) 05:02:23 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:23 executing program 4: 05:02:23 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100), 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:23 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 05:02:23 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f00000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1790.133068] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.153082] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.208415] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 05:02:23 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x148, 0x10400003) [ 1790.248687] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.279006] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.299150] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.325505] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.338500] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 05:02:23 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1790.350474] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.369106] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.391128] hid-generic 0000:0000:0000.01ED: unknown main item tag 0x0 [ 1790.414994] hid-generic 0000:0000:0000.01ED: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:24 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:24 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:24 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x4305000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x114bfc) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) 05:02:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x6000000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1790.999906] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.013082] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.031206] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.043649] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.064473] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.082190] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.105665] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.124206] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.130910] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 05:02:24 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x800e000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:24 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0)) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1791.153729] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.161389] hid-generic 0000:0000:0000.01EE: unknown main item tag 0x0 [ 1791.171327] hid-generic 0000:0000:0000.01EE: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1791.326969] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.337899] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.345871] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.352592] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.359971] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.366726] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.373684] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.380371] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.390616] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.397661] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.404428] hid-generic 0000:0000:0000.01EF: unknown main item tag 0x0 [ 1791.412959] hid-generic 0000:0000:0000.01EF: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:34 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 05:02:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) pread64(r0, &(0x7f0000001200)=""/4096, 0x1108, 0x0) 05:02:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8035000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:34 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:34 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132196) dup3(r0, r2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:02:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8100000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1800.947051] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1800.982415] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 05:02:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x86ddffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1801.018278] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.051690] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 05:02:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8847000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1801.078656] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.096876] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.107057] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.117177] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 05:02:34 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1801.127124] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.137250] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.149079] hid-generic 0000:0000:0000.01F0: unknown main item tag 0x0 [ 1801.160108] hid-generic 0000:0000:0000.01F0: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:34 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8848000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1801.294225] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.300951] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.325618] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.332339] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.339701] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.346848] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.353910] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.373806] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.390535] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.397969] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.406927] hid-generic 0000:0000:0000.01F1: unknown main item tag 0x0 [ 1801.420984] hid-generic 0000:0000:0000.01F1: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:44 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 05:02:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8864000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:44 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/51, 0x33}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 05:02:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:44 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88a8ffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1811.168351] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.190879] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.209052] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 05:02:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x88caffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1811.228086] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.246788] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.278877] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.304895] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.317373] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 05:02:44 executing program 4: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x20000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x8906000000000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1811.330666] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.344775] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 [ 1811.354772] hid-generic 0000:0000:0000.01F2: unknown main item tag 0x0 05:02:44 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1811.379588] hid-generic 0000:0000:0000.01F2: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:44 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffff00000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1811.509906] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.534110] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.544744] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.563328] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.571375] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.580167] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.604784] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.611829] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.619988] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.628209] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.635240] hid-generic 0000:0000:0000.01F3: unknown main item tag 0x0 [ 1811.645603] hid-generic 0000:0000:0000.01F3: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffffffffffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:54 executing program 4: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:54 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:54 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:54 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:54 executing program 2: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x20000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1821.428674] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.444239] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.446832] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.476884] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 05:02:54 executing program 2: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffffffffffff000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1821.504285] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.507358] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.541603] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.541778] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 05:02:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1821.575513] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.579133] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.608107] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.640692] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.643927] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.663548] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.667625] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.680268] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 05:02:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 05:02:54 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1821.685516] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.691019] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.703424] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 [ 1821.721005] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.724939] hid-generic 0000:0000:0000.01F5: unknown main item tag 0x0 05:02:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) [ 1821.759307] hid-generic 0000:0000:0000.01F4: unknown main item tag 0x0 [ 1821.780312] hid-generic 0000:0000:0000.01F5: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1821.795607] hid-generic 0000:0000:0000.01F4: hidraw3: HID v0.00 Device [syz1] on syz1 05:02:55 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8005) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) ioctl(r0, 0x140087602, &(0x7f0000000080)) 05:02:55 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 05:02:55 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x7, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1821.949220] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1821.964156] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1821.995097] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.022442] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.031735] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.056093] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.063150] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.079417] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.092512] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.101411] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.108574] hid-generic 0000:0000:0000.01F6: unknown main item tag 0x0 [ 1822.118063] hid-generic 0000:0000:0000.01F6: hidraw2: HID v0.00 Device [syz1] on syz1 05:02:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/220, 0xdc) 05:02:57 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:02:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 05:02:57 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:57 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8005) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) ioctl(r0, 0x10000000f, &(0x7f0000000080)) 05:02:57 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, 0x0) 05:02:57 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/220, 0xdc) 05:02:57 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:57 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1824.501377] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.526841] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.540914] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.550787] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.587072] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.588125] FAULT_INJECTION: forcing a failure. 05:02:57 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:02:57 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1824.588125] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.601627] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.619407] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.633280] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.669268] CPU: 0 PID: 5662 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1824.676155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1824.685507] Call Trace: [ 1824.688194] dump_stack+0x172/0x1f0 [ 1824.691970] should_fail.cold+0xa/0x15 [ 1824.691993] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1824.692038] ? ___might_sleep+0x163/0x280 05:02:57 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x10, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1824.692094] __should_failslab+0x121/0x190 [ 1824.692153] should_failslab+0x9/0x14 [ 1824.692170] kmem_cache_alloc_node+0x264/0x710 [ 1824.692194] ? __lock_acquire+0x548/0x3fb0 [ 1824.692262] __alloc_skb+0xd5/0x5e0 [ 1824.692280] ? skb_trim+0x190/0x190 [ 1824.692343] ? __fget+0x340/0x540 [ 1824.692359] ? find_held_lock+0x35/0x130 [ 1824.692413] vhci_write+0xc4/0x470 [ 1824.692467] __vfs_write+0x613/0x8e0 [ 1824.692487] ? kernel_read+0x120/0x120 [ 1824.692537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 05:02:57 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1824.692571] ? rw_verify_area+0x118/0x360 [ 1824.692589] vfs_write+0x20c/0x580 [ 1824.692610] ksys_write+0xea/0x1f0 [ 1824.692628] ? __ia32_sys_read+0xb0/0xb0 [ 1824.692669] ? do_syscall_64+0x26/0x610 [ 1824.692688] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1824.692702] ? do_syscall_64+0x26/0x610 [ 1824.692722] __x64_sys_write+0x73/0xb0 [ 1824.692740] do_syscall_64+0x103/0x610 [ 1824.692761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1824.692773] RIP: 0033:0x457f29 [ 1824.692788] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1824.692796] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1824.692811] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1824.692820] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1824.692829] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1824.692838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1824.692847] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1824.703349] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.703370] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.703389] hid-generic 0000:0000:0000.01F7: unknown main item tag 0x0 [ 1824.708716] hid-generic 0000:0000:0000.01F7: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1824.723083] FAULT_INJECTION: forcing a failure. [ 1824.723083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1824.738364] CPU: 1 PID: 5732 Comm: syz-executor.2 Not tainted 5.0.0+ #11 [ 1824.751184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1824.751193] Call Trace: [ 1824.800198] dump_stack+0x172/0x1f0 [ 1824.831321] should_fail.cold+0xa/0x15 [ 1824.831342] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1824.831359] ? ___might_sleep+0x163/0x280 [ 1824.831477] should_fail_alloc_page+0x50/0x60 [ 1824.831495] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1824.868256] ? __lock_acquire+0x548/0x3fb0 [ 1824.868278] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1824.868389] ? get_pid_task+0xc9/0x190 [ 1824.868408] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1824.882341] alloc_pages_current+0x107/0x210 [ 1824.904481] __get_free_pages+0xc/0x40 [ 1824.904589] vcs_write+0xbd/0xcf0 [ 1824.904651] ? refcount_dec_not_one+0x1f0/0x1f0 [ 1824.923234] ? vcs_size+0x250/0x250 [ 1824.923249] ? find_held_lock+0x35/0x130 [ 1824.923263] ? __fget+0x340/0x540 [ 1824.923281] __vfs_write+0x116/0x8e0 [ 1824.923298] ? vcs_size+0x250/0x250 [ 1824.923315] ? kernel_read+0x120/0x120 [ 1824.952159] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1824.970598] ? __inode_security_revalidate+0xda/0x120 [ 1824.970639] ? avc_policy_seqno+0xd/0x70 [ 1824.980033] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1824.988351] ? selinux_file_permission+0x92/0x550 [ 1824.988372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1824.996470] ? security_file_permission+0x94/0x380 [ 1824.996494] ? rw_verify_area+0x118/0x360 [ 1824.996514] vfs_write+0x20c/0x580 [ 1824.996536] ksys_write+0xea/0x1f0 [ 1824.996553] ? __ia32_sys_read+0xb0/0xb0 [ 1824.996570] ? do_syscall_64+0x26/0x610 [ 1824.996589] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1824.996604] ? do_syscall_64+0x26/0x610 [ 1824.996625] __x64_sys_write+0x73/0xb0 [ 1824.996642] do_syscall_64+0x103/0x610 [ 1825.018945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1825.018959] RIP: 0033:0x457f29 [ 1825.018974] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1825.018982] RSP: 002b:00007fd6d235ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1825.019002] RAX: ffffffffffffffda RBX: 00007fd6d235ac90 RCX: 0000000000457f29 [ 1825.043609] RDX: 0000000000000020 RSI: 0000000020000440 RDI: 0000000000000004 [ 1825.043619] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1825.043629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d235b6d4 [ 1825.043638] R13: 00000000004cd900 R14: 00000000004dcbd0 R15: 0000000000000005 [ 1825.056178] FAULT_INJECTION: forcing a failure. [ 1825.056178] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.076921] CPU: 1 PID: 5758 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1825.090765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.090771] Call Trace: [ 1825.090795] dump_stack+0x172/0x1f0 [ 1825.090818] should_fail.cold+0xa/0x15 [ 1825.090838] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1825.118123] ? ___might_sleep+0x163/0x280 [ 1825.118145] __should_failslab+0x121/0x190 [ 1825.118165] should_failslab+0x9/0x14 [ 1825.118182] kmem_cache_alloc_node_trace+0x270/0x720 [ 1825.118208] __kmalloc_node_track_caller+0x3d/0x70 [ 1825.118228] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1825.118247] __alloc_skb+0x10b/0x5e0 [ 1825.118263] ? skb_trim+0x190/0x190 [ 1825.118283] ? __fget+0x340/0x540 [ 1825.140695] ? find_held_lock+0x35/0x130 [ 1825.140716] vhci_write+0xc4/0x470 [ 1825.140739] __vfs_write+0x613/0x8e0 [ 1825.140758] ? kernel_read+0x120/0x120 [ 1825.140774] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1825.140803] ? rw_verify_area+0x118/0x360 [ 1825.140820] vfs_write+0x20c/0x580 [ 1825.155370] ksys_write+0xea/0x1f0 [ 1825.155390] ? __ia32_sys_read+0xb0/0xb0 [ 1825.155410] ? do_syscall_64+0x26/0x610 [ 1825.155429] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1825.155443] ? do_syscall_64+0x26/0x610 [ 1825.155470] __x64_sys_write+0x73/0xb0 [ 1825.155489] do_syscall_64+0x103/0x610 [ 1825.155508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1825.173936] RIP: 0033:0x457f29 [ 1825.173952] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1825.173961] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1825.173976] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1825.173985] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1825.173994] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1825.174004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1825.174013] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:03:00 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:00 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:00 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:00 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x11, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:00 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, 0x0) [ 1827.479785] FAULT_INJECTION: forcing a failure. [ 1827.479785] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.510802] CPU: 0 PID: 5774 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1827.517699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.527058] Call Trace: [ 1827.529667] dump_stack+0x172/0x1f0 [ 1827.533318] should_fail.cold+0xa/0x15 [ 1827.537225] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1827.542355] ? ___might_sleep+0x163/0x280 [ 1827.546531] __should_failslab+0x121/0x190 [ 1827.550781] should_failslab+0x9/0x14 [ 1827.554590] kmem_cache_alloc_node+0x264/0x710 [ 1827.559185] __alloc_skb+0xd5/0x5e0 [ 1827.562815] ? skb_trim+0x190/0x190 [ 1827.566462] ? vhci_write+0x2b3/0x470 [ 1827.568507] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.570383] ? rcu_read_lock_sched_held+0x110/0x130 [ 1827.570401] ? kmem_cache_free+0x225/0x260 [ 1827.586246] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.586292] __vhci_create_device+0x88/0x5a0 [ 1827.596187] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.597343] vhci_write+0x2d0/0x470 [ 1827.597365] __vfs_write+0x613/0x8e0 [ 1827.597387] ? kernel_read+0x120/0x120 [ 1827.604201] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.607661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1827.607697] ? rw_verify_area+0x118/0x360 [ 1827.607715] vfs_write+0x20c/0x580 [ 1827.612041] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.615379] ksys_write+0xea/0x1f0 [ 1827.615398] ? __ia32_sys_read+0xb0/0xb0 [ 1827.615418] ? do_syscall_64+0x26/0x610 [ 1827.615437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1827.615452] ? do_syscall_64+0x26/0x610 [ 1827.615471] __x64_sys_write+0x73/0xb0 [ 1827.622404] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.627653] do_syscall_64+0x103/0x610 [ 1827.627676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1827.627688] RIP: 0033:0x457f29 [ 1827.627703] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1827.627714] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1827.632097] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.635387] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1827.635396] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1827.635405] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1827.635415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1827.635424] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1827.780063] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.786975] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.794489] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.801167] hid-generic 0000:0000:0000.01F8: unknown main item tag 0x0 [ 1827.811341] hid-generic 0000:0000:0000.01F8: hidraw2: HID v0.00 Device [syz1] on syz1 05:03:07 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x14, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/220, 0xdc) 05:03:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:07 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:07 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:07 executing program 3: ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r3, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) sched_getattr(r1, &(0x7f00000004c0), 0x30, 0x0) read(r3, &(0x7f00000002c0)=""/169, 0xa9) r5 = dup2(r4, r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x14000, 0xfc, &(0x7f0000000380)=""/252}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r6, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(r2, 0x0, 0xfffffffffffffd68) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6(0x10, 0xfffffffffffffffd, 0x0) syz_open_procfs(0x0, 0x0) [ 1834.794485] FAULT_INJECTION: forcing a failure. [ 1834.794485] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.831473] CPU: 0 PID: 5889 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1834.838364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.847718] Call Trace: [ 1834.850320] dump_stack+0x172/0x1f0 [ 1834.853973] should_fail.cold+0xa/0x15 [ 1834.857884] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1834.863009] ? ___might_sleep+0x163/0x280 [ 1834.867169] __should_failslab+0x121/0x190 [ 1834.871422] should_failslab+0x9/0x14 [ 1834.875230] kmem_cache_alloc_node_trace+0x270/0x720 [ 1834.880349] __kmalloc_node_track_caller+0x3d/0x70 [ 1834.885300] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1834.889986] __alloc_skb+0x10b/0x5e0 [ 1834.893712] ? skb_trim+0x190/0x190 [ 1834.897342] ? vhci_write+0x2b3/0x470 [ 1834.901144] ? rcu_read_lock_sched_held+0x110/0x130 [ 1834.906180] ? kmem_cache_free+0x225/0x260 [ 1834.910599] __vhci_create_device+0x88/0x5a0 [ 1834.915014] vhci_write+0x2d0/0x470 [ 1834.915035] __vfs_write+0x613/0x8e0 [ 1834.915055] ? kernel_read+0x120/0x120 [ 1834.915070] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1834.915101] ? rw_verify_area+0x118/0x360 [ 1834.935975] vfs_write+0x20c/0x580 [ 1834.939525] ksys_write+0xea/0x1f0 05:03:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x28, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1834.943075] ? __ia32_sys_read+0xb0/0xb0 [ 1834.947150] ? do_syscall_64+0x26/0x610 [ 1834.951160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1834.951175] ? do_syscall_64+0x26/0x610 [ 1834.951198] __x64_sys_write+0x73/0xb0 [ 1834.951215] do_syscall_64+0x103/0x610 [ 1834.951235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1834.973484] RIP: 0033:0x457f29 [ 1834.973501] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1834.973509] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1834.973525] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1834.973534] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1834.973543] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1834.973551] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1834.973561] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1835.006926] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.006947] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.006972] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.006991] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.007010] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 05:03:08 executing program 4 (fault-call:1 fault-nth:4): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x60, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1835.007029] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.007049] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.007068] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.007087] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.007106] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 [ 1835.007124] hid-generic 0000:0000:0000.01F9: unknown main item tag 0x0 05:03:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x3, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1835.175446] FAULT_INJECTION: forcing a failure. [ 1835.175446] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.211928] CPU: 0 PID: 6012 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1835.218816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.228170] Call Trace: [ 1835.230769] dump_stack+0x172/0x1f0 [ 1835.234417] should_fail.cold+0xa/0x15 [ 1835.238326] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1835.238352] ? ___might_sleep+0x163/0x280 [ 1835.238377] __should_failslab+0x121/0x190 [ 1835.238399] should_failslab+0x9/0x14 [ 1835.244490] hid-generic 0000:0000:0000.01F9: hidraw2: HID v0.00 Device [syz1] on syz1 [ 1835.247637] kmem_cache_alloc_trace+0x2d1/0x760 [ 1835.247657] ? skb_trim+0x190/0x190 05:03:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1835.247673] ? vhci_write+0x2b3/0x470 [ 1835.247690] ? rcu_read_lock_sched_held+0x110/0x130 [ 1835.247795] hci_alloc_dev+0x43/0x1d00 [ 1835.255786] __vhci_create_device+0x101/0x5a0 [ 1835.255806] vhci_write+0x2d0/0x470 [ 1835.255828] __vfs_write+0x613/0x8e0 [ 1835.255846] ? kernel_read+0x120/0x120 [ 1835.255861] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1835.255905] ? rw_verify_area+0x118/0x360 [ 1835.255922] vfs_write+0x20c/0x580 [ 1835.269416] ksys_write+0xea/0x1f0 [ 1835.269436] ? __ia32_sys_read+0xb0/0xb0 [ 1835.269455] ? do_syscall_64+0x26/0x610 [ 1835.269473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.269490] ? do_syscall_64+0x26/0x610 [ 1835.282386] __x64_sys_write+0x73/0xb0 [ 1835.298066] do_syscall_64+0x103/0x610 [ 1835.298092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.298105] RIP: 0033:0x457f29 [ 1835.298121] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:03:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1835.298132] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1835.307534] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1835.307543] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1835.307552] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1835.307562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1835.307572] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:03:18 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/220, 0xdc) 05:03:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x19, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @remote}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f00000001c0)=0x90) 05:03:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x543, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:18 executing program 4 (fault-call:1 fault-nth:5): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:18 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1845.036208] FAULT_INJECTION: forcing a failure. [ 1845.036208] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.079571] CPU: 1 PID: 6042 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1845.086446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.086454] Call Trace: [ 1845.086488] dump_stack+0x172/0x1f0 [ 1845.086518] should_fail.cold+0xa/0x15 [ 1845.086543] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1845.098483] ? ___might_sleep+0x163/0x280 [ 1845.098505] __should_failslab+0x121/0x190 [ 1845.098527] should_failslab+0x9/0x14 [ 1845.098543] __kmalloc+0x2dc/0x740 [ 1845.098567] ? alloc_workqueue+0x13c/0xe70 [ 1845.106226] alloc_workqueue+0x13c/0xe70 [ 1845.106252] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1845.106268] ? scnprintf+0x140/0x140 [ 1845.106358] ? __init_waitqueue_head+0x36/0x90 [ 1845.106383] hci_register_dev+0x1b8/0x860 [ 1845.115662] ? hci_init_sysfs+0x7c/0xa0 [ 1845.115687] __vhci_create_device+0x2d0/0x5a0 [ 1845.127229] vhci_write+0x2d0/0x470 [ 1845.127252] __vfs_write+0x613/0x8e0 [ 1845.127271] ? kernel_read+0x120/0x120 [ 1845.135540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 05:03:18 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) 05:03:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x50, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1845.135576] ? rw_verify_area+0x118/0x360 [ 1845.135594] vfs_write+0x20c/0x580 [ 1845.135614] ksys_write+0xea/0x1f0 [ 1845.145204] ? __ia32_sys_read+0xb0/0xb0 [ 1845.145225] ? do_syscall_64+0x26/0x610 [ 1845.145244] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1845.145257] ? do_syscall_64+0x26/0x610 [ 1845.145278] __x64_sys_write+0x73/0xb0 [ 1845.186825] do_syscall_64+0x103/0x610 [ 1845.186851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1845.186865] RIP: 0033:0x457f29 05:03:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1845.186891] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1845.186900] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1845.194493] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1845.194502] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1845.194510] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:03:18 executing program 3: [ 1845.194520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1845.194528] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:03:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x608, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1845.333808] Bluetooth: Can't register HCI device 05:03:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x300, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:18 executing program 3: 05:03:18 executing program 4 (fault-call:1 fault-nth:6): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x689, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xfa4, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1845.494656] FAULT_INJECTION: forcing a failure. [ 1845.494656] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.535926] CPU: 0 PID: 6075 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1845.542820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.552182] Call Trace: [ 1845.554785] dump_stack+0x172/0x1f0 [ 1845.554813] should_fail.cold+0xa/0x15 [ 1845.554836] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1845.554860] ? ___might_sleep+0x163/0x280 [ 1845.554894] __should_failslab+0x121/0x190 [ 1845.554918] should_failslab+0x9/0x14 [ 1845.554938] kmem_cache_alloc_trace+0x2d1/0x760 05:03:18 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1845.554956] ? rcu_read_lock_sched_held+0x110/0x130 [ 1845.554983] ? __kmalloc+0x5d5/0x740 [ 1845.562485] alloc_workqueue_attrs+0x82/0x120 [ 1845.597571] alloc_workqueue+0x166/0xe70 [ 1845.597596] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1845.597615] ? scnprintf+0x140/0x140 [ 1845.610400] ? __init_waitqueue_head+0x36/0x90 [ 1845.615003] hci_register_dev+0x1b8/0x860 [ 1845.619157] ? hci_init_sysfs+0x7c/0xa0 [ 1845.623147] __vhci_create_device+0x2d0/0x5a0 [ 1845.627657] vhci_write+0x2d0/0x470 [ 1845.631387] __vfs_write+0x613/0x8e0 [ 1845.635130] ? kernel_read+0x120/0x120 [ 1845.635147] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1845.635181] ? rw_verify_area+0x118/0x360 [ 1845.635201] vfs_write+0x20c/0x580 [ 1845.635222] ksys_write+0xea/0x1f0 [ 1845.635241] ? __ia32_sys_read+0xb0/0xb0 [ 1845.635260] ? do_syscall_64+0x26/0x610 [ 1845.635278] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1845.635293] ? do_syscall_64+0x26/0x610 [ 1845.635314] __x64_sys_write+0x73/0xb0 [ 1845.635332] do_syscall_64+0x103/0x610 [ 1845.635354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1845.635366] RIP: 0033:0x457f29 [ 1845.635381] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1845.635390] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1845.635406] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1845.635415] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1845.635424] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1845.635434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1845.635443] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1845.649332] Bluetooth: Can't register HCI device 05:03:21 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc), 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:29 executing program 3: 05:03:29 executing program 4 (fault-call:1 fault-nth:7): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x806, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x1900, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:29 executing program 5: 05:03:29 executing program 3: [ 1855.904386] FAULT_INJECTION: forcing a failure. [ 1855.904386] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.999861] CPU: 1 PID: 6096 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1856.006776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1856.016678] Call Trace: [ 1856.019551] dump_stack+0x172/0x1f0 [ 1856.023203] should_fail.cold+0xa/0x15 [ 1856.027110] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1856.032228] ? ___might_sleep+0x163/0x280 [ 1856.036392] __should_failslab+0x121/0x190 [ 1856.040665] should_failslab+0x9/0x14 [ 1856.044493] kmem_cache_alloc_trace+0x2d1/0x760 [ 1856.049178] ? rcu_read_lock_sched_held+0x110/0x130 [ 1856.054204] ? __kmalloc+0x5d5/0x740 [ 1856.058042] alloc_workqueue_attrs+0x82/0x120 [ 1856.062887] alloc_workqueue+0x166/0xe70 [ 1856.066994] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1856.072024] ? scnprintf+0x140/0x140 [ 1856.075745] ? __init_waitqueue_head+0x36/0x90 [ 1856.080338] hci_register_dev+0x1b8/0x860 [ 1856.084492] ? hci_init_sysfs+0x7c/0xa0 [ 1856.088481] __vhci_create_device+0x2d0/0x5a0 [ 1856.092984] vhci_write+0x2d0/0x470 [ 1856.096620] __vfs_write+0x613/0x8e0 [ 1856.100345] ? kernel_read+0x120/0x120 [ 1856.104236] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1856.109790] ? rw_verify_area+0x118/0x360 [ 1856.113943] vfs_write+0x20c/0x580 [ 1856.117494] ksys_write+0xea/0x1f0 [ 1856.121039] ? __ia32_sys_read+0xb0/0xb0 [ 1856.125108] ? do_syscall_64+0x26/0x610 [ 1856.129086] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1856.134450] ? do_syscall_64+0x26/0x610 [ 1856.138431] __x64_sys_write+0x73/0xb0 [ 1856.142325] do_syscall_64+0x103/0x610 [ 1856.146217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1856.151401] RIP: 0033:0x457f29 [ 1856.154596] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1856.173589] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1856.181297] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1856.188560] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 05:03:29 executing program 3: 05:03:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_SECCOMP(0x15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:03:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x100000000) 05:03:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x5000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:29 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb00, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1856.195828] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1856.203091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1856.210364] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1856.223950] Bluetooth: Can't register HCI device 05:03:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc), 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:32 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x3f, 0x0, 0x0, 0x10000000a}}, {{@in6, 0x0, 0xff}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x4048084, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) write$binfmt_elf32(r0, 0x0, 0x0) 05:03:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xa40f, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:32 executing program 4 (fault-call:1 fault-nth:8): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd00, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x10000000a}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0xff}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x4048084, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) write$binfmt_elf32(r0, 0x0, 0x0) [ 1858.968180] FAULT_INJECTION: forcing a failure. [ 1858.968180] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.987746] CPU: 0 PID: 6136 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1858.994606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1859.003964] Call Trace: [ 1859.006580] dump_stack+0x172/0x1f0 [ 1859.010234] should_fail.cold+0xa/0x15 05:03:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe80, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1859.014139] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1859.019266] ? ___might_sleep+0x163/0x280 [ 1859.023429] __should_failslab+0x121/0x190 [ 1859.027676] should_failslab+0x9/0x14 [ 1859.031483] __kmalloc+0x2dc/0x740 [ 1859.035038] ? apply_wqattrs_prepare+0xae/0x970 [ 1859.039720] apply_wqattrs_prepare+0xae/0x970 [ 1859.044236] apply_workqueue_attrs_locked+0xcb/0x140 [ 1859.049347] apply_workqueue_attrs+0x31/0x50 [ 1859.053767] alloc_workqueue+0x84c/0xe70 [ 1859.057848] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1859.062901] ? __init_waitqueue_head+0x36/0x90 [ 1859.067522] hci_register_dev+0x1b8/0x860 [ 1859.071682] ? hci_init_sysfs+0x7c/0xa0 [ 1859.075666] __vhci_create_device+0x2d0/0x5a0 [ 1859.075686] vhci_write+0x2d0/0x470 [ 1859.075706] __vfs_write+0x613/0x8e0 [ 1859.075725] ? kernel_read+0x120/0x120 [ 1859.075740] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1859.075771] ? rw_verify_area+0x118/0x360 [ 1859.075789] vfs_write+0x20c/0x580 [ 1859.075808] ksys_write+0xea/0x1f0 [ 1859.075826] ? __ia32_sys_read+0xb0/0xb0 [ 1859.075843] ? do_syscall_64+0x26/0x610 05:03:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1100, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1859.075860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1859.075886] ? do_syscall_64+0x26/0x610 [ 1859.075907] __x64_sys_write+0x73/0xb0 [ 1859.075923] do_syscall_64+0x103/0x610 [ 1859.075946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1859.139216] RIP: 0033:0x457f29 [ 1859.142414] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1859.161587] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:03:32 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1400, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xfaffff, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x80000, 0x0) socket$inet6(0xa, 0x800, 0xd5b0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x8) clone(0x2c97c27ada20ce18, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000008c0)={{0x8, 0x908, 0x81}, 'syz0\x00', 0x2e}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) getsockopt$inet_dccp_int(r8, 0x21, 0x11, &(0x7f00000006c0), &(0x7f0000000880)=0x4) setsockopt$inet_dccp_buf(r8, 0x21, 0x0, &(0x7f0000000940)="640b4f4bc410840e2726d1f4a894046cda1dac3db3d99102588ab05934849524e37515c2d99972f585d00af69de6753c217433dd371c30fdcdb0bc50e849d7e8b75e0b77089b83304f0a7d1cd20af4e9a4e6eebd0000000000009311cc0dcd24000000568d175d756f89aace28ec6d30797d5c17e66e861a15ad156898296a32346c", 0x82) 05:03:32 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) [ 1859.169303] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1859.176576] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1859.183844] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1859.183854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1859.183864] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1859.199658] Bluetooth: Can't register HCI device 05:03:35 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc), 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x1000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:35 executing program 4 (fault-call:1 fault-nth:9): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x80000, 0x0) socket$inet6(0xa, 0x800, 0xd5b0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x8) clone(0x2c97c27ada20ce18, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000008c0)={{0x8, 0x908, 0x81}, 'syz0\x00', 0x2e}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) getsockopt$inet_dccp_int(r8, 0x21, 0x11, &(0x7f00000006c0), &(0x7f0000000880)=0x4) setsockopt$inet_dccp_buf(r8, 0x21, 0x0, &(0x7f0000000940)="640b4f4bc410840e2726d1f4a894046cda1dac3db3d99102588ab05934849524e37515c2d99972f585d00af69de6753c217433dd371c30fdcdb0bc50e849d7e8b75e0b77089b83304f0a7d1cd20af4e9a4e6eebd0000000000009311cc0dcd24000000568d175d756f89aace28ec6d30797d5c17e66e861a15ad156898296a32346c", 0x82) [ 1861.999849] FAULT_INJECTION: forcing a failure. [ 1861.999849] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.051096] CPU: 0 PID: 6281 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1862.057998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1862.067346] Call Trace: [ 1862.069942] dump_stack+0x172/0x1f0 [ 1862.073595] should_fail.cold+0xa/0x15 [ 1862.077492] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1862.082588] ? ___might_sleep+0x163/0x280 [ 1862.086737] __should_failslab+0x121/0x190 [ 1862.090964] should_failslab+0x9/0x14 [ 1862.094767] kmem_cache_alloc_trace+0x2d1/0x760 [ 1862.099435] ? rcu_read_lock_sched_held+0x110/0x130 [ 1862.104446] ? __kmalloc+0x5d5/0x740 [ 1862.108161] alloc_workqueue_attrs+0x82/0x120 [ 1862.112644] apply_wqattrs_prepare+0xbb/0x970 [ 1862.117132] apply_workqueue_attrs_locked+0xcb/0x140 [ 1862.122221] apply_workqueue_attrs+0x31/0x50 [ 1862.126630] alloc_workqueue+0x84c/0xe70 [ 1862.130685] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1862.135705] ? __init_waitqueue_head+0x36/0x90 [ 1862.140326] hci_register_dev+0x1b8/0x860 [ 1862.144471] ? hci_init_sysfs+0x7c/0xa0 [ 1862.148444] __vhci_create_device+0x2d0/0x5a0 [ 1862.152928] vhci_write+0x2d0/0x470 [ 1862.156558] __vfs_write+0x613/0x8e0 [ 1862.160268] ? kernel_read+0x120/0x120 [ 1862.164152] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1862.169690] ? rw_verify_area+0x118/0x360 [ 1862.173835] vfs_write+0x20c/0x580 [ 1862.177375] ksys_write+0xea/0x1f0 [ 1862.180908] ? __ia32_sys_read+0xb0/0xb0 [ 1862.184967] ? do_syscall_64+0x26/0x610 [ 1862.188948] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1862.194309] ? do_syscall_64+0x26/0x610 [ 1862.198282] __x64_sys_write+0x73/0xb0 [ 1862.202157] do_syscall_64+0x103/0x610 [ 1862.206047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1862.211238] RIP: 0033:0x457f29 [ 1862.214435] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1862.233442] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1862.241131] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 05:03:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1862.248384] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1862.255649] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1862.262911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1862.270166] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1862.288861] Bluetooth: Can't register HCI device 05:03:35 executing program 4 (fault-call:1 fault-nth:10): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x3000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:35 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3580, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x80000, 0x0) socket$inet6(0xa, 0x800, 0xd5b0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x8) clone(0x2c97c27ada20ce18, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000008c0)={{0x8, 0x908, 0x81}, 'syz0\x00', 0x2e}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) getsockopt$inet_dccp_int(r8, 0x21, 0x11, &(0x7f00000006c0), &(0x7f0000000880)=0x4) setsockopt$inet_dccp_buf(r8, 0x21, 0x0, &(0x7f0000000940)="640b4f4bc410840e2726d1f4a894046cda1dac3db3d99102588ab05934849524e37515c2d99972f585d00af69de6753c217433dd371c30fdcdb0bc50e849d7e8b75e0b77089b83304f0a7d1cd20af4e9a4e6eebd0000000000009311cc0dcd24000000568d175d756f89aace28ec6d30797d5c17e66e861a15ad156898296a32346c", 0x82) [ 1862.454792] FAULT_INJECTION: forcing a failure. [ 1862.454792] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.497904] CPU: 0 PID: 6312 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1862.504773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1862.514127] Call Trace: [ 1862.516725] dump_stack+0x172/0x1f0 [ 1862.520372] should_fail.cold+0xa/0x15 [ 1862.524278] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1862.529382] ? ___might_sleep+0x163/0x280 [ 1862.533519] __should_failslab+0x121/0x190 [ 1862.537759] should_failslab+0x9/0x14 [ 1862.541559] kmem_cache_alloc_trace+0x2d1/0x760 [ 1862.546249] ? rcu_read_lock_sched_held+0x110/0x130 [ 1862.551266] ? __kmalloc+0x5d5/0x740 [ 1862.554996] alloc_workqueue_attrs+0x82/0x120 [ 1862.559490] apply_wqattrs_prepare+0xc8/0x970 [ 1862.563999] apply_workqueue_attrs_locked+0xcb/0x140 [ 1862.569114] apply_workqueue_attrs+0x31/0x50 [ 1862.573624] alloc_workqueue+0x84c/0xe70 [ 1862.577702] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1862.582737] ? __init_waitqueue_head+0x36/0x90 [ 1862.587325] hci_register_dev+0x1b8/0x860 [ 1862.591459] ? hci_init_sysfs+0x7c/0xa0 [ 1862.595438] __vhci_create_device+0x2d0/0x5a0 [ 1862.599952] vhci_write+0x2d0/0x470 [ 1862.603588] __vfs_write+0x613/0x8e0 [ 1862.607302] ? kernel_read+0x120/0x120 [ 1862.611174] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1862.616727] ? rw_verify_area+0x118/0x360 [ 1862.620897] vfs_write+0x20c/0x580 [ 1862.624442] ksys_write+0xea/0x1f0 [ 1862.627985] ? __ia32_sys_read+0xb0/0xb0 [ 1862.632045] ? do_syscall_64+0x26/0x610 [ 1862.636029] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1862.641388] ? do_syscall_64+0x26/0x610 [ 1862.645365] __x64_sys_write+0x73/0xb0 [ 1862.649250] do_syscall_64+0x103/0x610 [ 1862.653131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1862.658311] RIP: 0033:0x457f29 [ 1862.661502] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1862.680406] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1862.688098] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1862.695362] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1862.702623] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1862.709882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1862.717140] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1862.735037] Bluetooth: Can't register HCI device 05:03:42 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) 05:03:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x19000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3f00, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:42 executing program 4 (fault-call:1 fault-nth:11): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:42 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x80000, 0x0) socket$inet6(0xa, 0x800, 0xd5b0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x8) clone(0x2c97c27ada20ce18, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000008c0)={{0x8, 0x908, 0x81}, 'syz0\x00', 0x2e}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) getsockopt$inet_dccp_int(r8, 0x21, 0x11, &(0x7f00000006c0), &(0x7f0000000880)=0x4) setsockopt$inet_dccp_buf(r8, 0x21, 0x0, &(0x7f0000000940)="640b4f4bc410840e2726d1f4a894046cda1dac3db3d99102588ab05934849524e37515c2d99972f585d00af69de6753c217433dd371c30fdcdb0bc50e849d7e8b75e0b77089b83304f0a7d1cd20af4e9a4e6eebd0000000000009311cc0dcd24000000568d175d756f89aace28ec6d30797d5c17e66e861a15ad156898296a32346c", 0x82) 05:03:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1869.351288] FAULT_INJECTION: forcing a failure. [ 1869.351288] name failslab, interval 1, probability 0, space 0, times 0 05:03:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1869.414982] CPU: 1 PID: 6329 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1869.421864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1869.431225] Call Trace: [ 1869.433833] dump_stack+0x172/0x1f0 [ 1869.437488] should_fail.cold+0xa/0x15 [ 1869.441408] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1869.446968] ? ___might_sleep+0x163/0x280 [ 1869.451129] __should_failslab+0x121/0x190 [ 1869.455378] should_failslab+0x9/0x14 [ 1869.459191] kmem_cache_alloc_node+0x264/0x710 05:03:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1869.463926] alloc_unbound_pwq+0x4c5/0xcf0 [ 1869.468183] apply_wqattrs_prepare+0x35e/0x970 [ 1869.472791] apply_workqueue_attrs_locked+0xcb/0x140 [ 1869.478116] apply_workqueue_attrs+0x31/0x50 [ 1869.482533] alloc_workqueue+0x84c/0xe70 [ 1869.486614] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1869.491661] ? __init_waitqueue_head+0x36/0x90 [ 1869.496256] hci_register_dev+0x1b8/0x860 [ 1869.496273] ? hci_init_sysfs+0x7c/0xa0 [ 1869.496301] __vhci_create_device+0x2d0/0x5a0 [ 1869.509531] vhci_write+0x2d0/0x470 05:03:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1869.513177] __vfs_write+0x613/0x8e0 [ 1869.516919] ? kernel_read+0x120/0x120 [ 1869.520817] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1869.526387] ? rw_verify_area+0x118/0x360 [ 1869.530545] vfs_write+0x20c/0x580 [ 1869.534290] ksys_write+0xea/0x1f0 [ 1869.537848] ? __ia32_sys_read+0xb0/0xb0 [ 1869.542437] ? do_syscall_64+0x26/0x610 [ 1869.546425] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1869.551796] ? do_syscall_64+0x26/0x610 [ 1869.555776] __x64_sys_write+0x73/0xb0 [ 1869.555795] do_syscall_64+0x103/0x610 05:03:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1869.555816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1869.555830] RIP: 0033:0x457f29 [ 1869.571963] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1869.591088] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1869.598994] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1869.606494] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 05:03:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x50000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1869.613762] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1869.613772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1869.613781] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1869.640642] Bluetooth: Can't register HCI device 05:03:53 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) 05:03:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4788, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xa40f0000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:53 executing program 4 (fault-call:1 fault-nth:12): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:03:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x80000, 0x0) socket$inet6(0xa, 0x800, 0xd5b0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x8) clone(0x2c97c27ada20ce18, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000008c0)={{0x8, 0x908, 0x81}, 'syz0\x00', 0x2e}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) getsockopt$inet_dccp_int(r8, 0x21, 0x11, &(0x7f00000006c0), &(0x7f0000000880)=0x4) setsockopt$inet_dccp_buf(r8, 0x21, 0x0, &(0x7f0000000940)="640b4f4bc410840e2726d1f4a894046cda1dac3db3d99102588ab05934849524e37515c2d99972f585d00af69de6753c217433dd371c30fdcdb0bc50e849d7e8b75e0b77089b83304f0a7d1cd20af4e9a4e6eebd0000000000009311cc0dcd24000000568d175d756f89aace28ec6d30797d5c17e66e861a15ad156898296a32346c", 0x82) [ 1880.241415] FAULT_INJECTION: forcing a failure. [ 1880.241415] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.285418] CPU: 0 PID: 6373 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1880.292295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.301684] Call Trace: [ 1880.304296] dump_stack+0x172/0x1f0 [ 1880.307957] should_fail.cold+0xa/0x15 [ 1880.311896] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1880.317038] ? ___might_sleep+0x163/0x280 [ 1880.321208] __should_failslab+0x121/0x190 [ 1880.325460] should_failslab+0x9/0x14 [ 1880.329273] __kmalloc+0x2dc/0x740 [ 1880.332821] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1880.337847] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 1880.342625] ? alloc_workqueue+0x13c/0xe70 [ 1880.346880] alloc_workqueue+0x13c/0xe70 [ 1880.350995] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1880.351018] ? __init_waitqueue_head+0x36/0x90 [ 1880.360635] hci_register_dev+0x209/0x860 [ 1880.360659] __vhci_create_device+0x2d0/0x5a0 [ 1880.360679] vhci_write+0x2d0/0x470 [ 1880.360700] __vfs_write+0x613/0x8e0 [ 1880.360719] ? kernel_read+0x120/0x120 [ 1880.360734] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1880.360768] ? rw_verify_area+0x118/0x360 [ 1880.360787] vfs_write+0x20c/0x580 [ 1880.360807] ksys_write+0xea/0x1f0 [ 1880.360825] ? __ia32_sys_read+0xb0/0xb0 [ 1880.360844] ? do_syscall_64+0x26/0x610 [ 1880.360862] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1880.360876] ? do_syscall_64+0x26/0x610 [ 1880.360907] __x64_sys_write+0x73/0xb0 [ 1880.360925] do_syscall_64+0x103/0x610 [ 1880.360946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1880.360958] RIP: 0033:0x457f29 [ 1880.360974] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1880.360988] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.361003] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1880.361012] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1880.361021] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:03:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xfffffa00, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:03:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:03:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4888, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:03:53 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6488, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1880.361030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1880.361042] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1880.506064] Bluetooth: Can't register HCI device 05:03:53 executing program 4 (fault-call:1 fault-nth:13): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1880.642877] FAULT_INJECTION: forcing a failure. [ 1880.642877] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.670679] CPU: 0 PID: 6406 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1880.677546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.686910] Call Trace: [ 1880.686939] dump_stack+0x172/0x1f0 [ 1880.686965] should_fail.cold+0xa/0x15 [ 1880.686996] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1880.697065] ? ___might_sleep+0x163/0x280 [ 1880.697087] __should_failslab+0x121/0x190 [ 1880.697107] should_failslab+0x9/0x14 [ 1880.697125] __kmalloc+0x2dc/0x740 [ 1880.717913] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1880.722943] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 1880.727701] ? alloc_workqueue+0x13c/0xe70 [ 1880.731923] alloc_workqueue+0x13c/0xe70 [ 1880.735975] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1880.740992] ? __init_waitqueue_head+0x36/0x90 [ 1880.745652] hci_register_dev+0x209/0x860 [ 1880.749791] __vhci_create_device+0x2d0/0x5a0 [ 1880.754275] vhci_write+0x2d0/0x470 [ 1880.757911] __vfs_write+0x613/0x8e0 [ 1880.761615] ? kernel_read+0x120/0x120 [ 1880.765488] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1880.771021] ? rw_verify_area+0x118/0x360 [ 1880.775156] vfs_write+0x20c/0x580 [ 1880.778698] ksys_write+0xea/0x1f0 [ 1880.782238] ? __ia32_sys_read+0xb0/0xb0 [ 1880.786302] ? do_syscall_64+0x26/0x610 [ 1880.790264] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1880.795640] ? do_syscall_64+0x26/0x610 [ 1880.799604] __x64_sys_write+0x73/0xb0 [ 1880.803478] do_syscall_64+0x103/0x610 [ 1880.807355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1880.812528] RIP: 0033:0x457f29 [ 1880.815705] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1880.834598] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.842300] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1880.849564] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1880.856823] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1880.864085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1880.871338] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1880.882217] Bluetooth: Can't register HCI device 05:04:04 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, 0x0, 0x0) 05:04:04 executing program 4 (fault-call:1 fault-nth:14): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800e, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:04 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:04:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xfaffff00000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:04:04 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) [ 1891.136737] FAULT_INJECTION: forcing a failure. [ 1891.136737] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.156966] CPU: 1 PID: 6422 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1891.163835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.173203] Call Trace: [ 1891.175800] dump_stack+0x172/0x1f0 [ 1891.179443] should_fail.cold+0xa/0x15 [ 1891.183346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1891.188476] ? ___might_sleep+0x163/0x280 [ 1891.192655] __should_failslab+0x121/0x190 [ 1891.196902] should_failslab+0x9/0x14 [ 1891.200692] kmem_cache_alloc_trace+0x2d1/0x760 [ 1891.205361] ? rcu_read_lock_sched_held+0x110/0x130 [ 1891.210373] ? __kmalloc+0x5d5/0x740 [ 1891.214077] alloc_workqueue_attrs+0x82/0x120 [ 1891.218561] alloc_workqueue+0x166/0xe70 [ 1891.222613] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1891.227631] ? __init_waitqueue_head+0x36/0x90 [ 1891.232221] hci_register_dev+0x209/0x860 [ 1891.236362] __vhci_create_device+0x2d0/0x5a0 [ 1891.240843] vhci_write+0x2d0/0x470 [ 1891.244470] __vfs_write+0x613/0x8e0 [ 1891.248186] ? kernel_read+0x120/0x120 [ 1891.252058] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1891.257592] ? rw_verify_area+0x118/0x360 [ 1891.261731] vfs_write+0x20c/0x580 [ 1891.265259] ksys_write+0xea/0x1f0 [ 1891.268783] ? __ia32_sys_read+0xb0/0xb0 [ 1891.272831] ? do_syscall_64+0x26/0x610 [ 1891.276803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.282174] ? do_syscall_64+0x26/0x610 [ 1891.286136] __x64_sys_write+0x73/0xb0 [ 1891.290180] do_syscall_64+0x103/0x610 [ 1891.294070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.299247] RIP: 0033:0x457f29 [ 1891.302425] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1891.321308] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.329034] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 05:04:04 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) 05:04:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8035, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x100000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1891.336286] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1891.343546] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1891.350811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1891.358086] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1891.398432] Bluetooth: Can't register HCI device 05:04:04 executing program 4 (fault-call:1 fault-nth:15): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:04 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) 05:04:04 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8100, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x200000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1891.516489] FAULT_INJECTION: forcing a failure. [ 1891.516489] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.575405] CPU: 0 PID: 6439 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1891.582287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.591642] Call Trace: [ 1891.594243] dump_stack+0x172/0x1f0 [ 1891.597901] should_fail.cold+0xa/0x15 [ 1891.601804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1891.606930] ? ___might_sleep+0x163/0x280 [ 1891.611093] __should_failslab+0x121/0x190 [ 1891.615369] should_failslab+0x9/0x14 [ 1891.619176] __kmalloc+0x2dc/0x740 [ 1891.622735] ? apply_wqattrs_prepare+0xae/0x970 [ 1891.627440] apply_wqattrs_prepare+0xae/0x970 [ 1891.627470] apply_workqueue_attrs_locked+0xcb/0x140 [ 1891.627488] apply_workqueue_attrs+0x31/0x50 [ 1891.627506] alloc_workqueue+0x84c/0xe70 [ 1891.627527] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1891.627548] ? __init_waitqueue_head+0x36/0x90 [ 1891.627572] hci_register_dev+0x209/0x860 [ 1891.627595] __vhci_create_device+0x2d0/0x5a0 [ 1891.627613] vhci_write+0x2d0/0x470 [ 1891.627633] __vfs_write+0x613/0x8e0 05:04:04 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) [ 1891.627651] ? kernel_read+0x120/0x120 [ 1891.627667] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1891.627699] ? rw_verify_area+0x118/0x360 [ 1891.627718] vfs_write+0x20c/0x580 [ 1891.627738] ksys_write+0xea/0x1f0 [ 1891.627756] ? __ia32_sys_read+0xb0/0xb0 [ 1891.627775] ? do_syscall_64+0x26/0x610 [ 1891.627794] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.627809] ? do_syscall_64+0x26/0x610 [ 1891.627829] __x64_sys_write+0x73/0xb0 [ 1891.627847] do_syscall_64+0x103/0x610 [ 1891.627868] entry_SYSCALL_64_after_hwframe+0x49/0xbe 05:04:04 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) read(r0, 0x0, 0x0) [ 1891.627880] RIP: 0033:0x457f29 [ 1891.627908] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1891.627917] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.627932] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1891.627941] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1891.627949] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1891.627958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1891.627967] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1891.683089] Bluetooth: Can't register HCI device 05:04:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) read(r0, 0x0, 0x0) 05:04:07 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8847, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:14 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) 05:04:14 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:04:14 executing program 4 (fault-call:1 fault-nth:16): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x300000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:04:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) read(r0, 0x0, 0x0) 05:04:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8848, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) read(r0, 0x0, 0x0) [ 1901.351663] FAULT_INJECTION: forcing a failure. [ 1901.351663] name failslab, interval 1, probability 0, space 0, times 0 05:04:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x1900000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1901.421002] CPU: 1 PID: 6469 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1901.427915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.437272] Call Trace: [ 1901.439879] dump_stack+0x172/0x1f0 [ 1901.443546] should_fail.cold+0xa/0x15 [ 1901.447454] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1901.452584] ? ___might_sleep+0x163/0x280 [ 1901.456743] __should_failslab+0x121/0x190 [ 1901.460990] should_failslab+0x9/0x14 [ 1901.464800] kmem_cache_alloc_trace+0x2d1/0x760 [ 1901.469478] ? rcu_read_lock_sched_held+0x110/0x130 [ 1901.474514] ? __kmalloc+0x5d5/0x740 [ 1901.474539] alloc_workqueue_attrs+0x82/0x120 [ 1901.474558] apply_wqattrs_prepare+0xbb/0x970 [ 1901.474583] apply_workqueue_attrs_locked+0xcb/0x140 [ 1901.482776] apply_workqueue_attrs+0x31/0x50 [ 1901.482795] alloc_workqueue+0x84c/0xe70 [ 1901.482820] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1901.482845] ? __init_waitqueue_head+0x36/0x90 [ 1901.482869] hci_register_dev+0x209/0x860 [ 1901.514611] __vhci_create_device+0x2d0/0x5a0 [ 1901.519098] vhci_write+0x2d0/0x470 [ 1901.522748] __vfs_write+0x613/0x8e0 [ 1901.526485] ? kernel_read+0x120/0x120 [ 1901.530373] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1901.535928] ? rw_verify_area+0x118/0x360 [ 1901.540063] vfs_write+0x20c/0x580 [ 1901.543603] ksys_write+0xea/0x1f0 [ 1901.547141] ? __ia32_sys_read+0xb0/0xb0 [ 1901.551190] ? do_syscall_64+0x26/0x610 [ 1901.555152] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1901.560528] ? do_syscall_64+0x26/0x610 [ 1901.560553] __x64_sys_write+0x73/0xb0 05:04:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8864, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:14 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 1901.568419] do_syscall_64+0x103/0x610 [ 1901.568444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1901.577510] RIP: 0033:0x457f29 [ 1901.577525] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1901.577533] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1901.577547] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1901.577556] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1901.577564] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1901.577573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 05:04:14 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8906, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1901.577582] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1901.650152] Bluetooth: Can't register HCI device 05:04:14 executing program 4 (fault-call:1 fault-nth:17): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1901.826837] FAULT_INJECTION: forcing a failure. [ 1901.826837] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.846526] CPU: 1 PID: 6507 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1901.853386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.862729] Call Trace: [ 1901.865324] dump_stack+0x172/0x1f0 [ 1901.868962] should_fail.cold+0xa/0x15 [ 1901.872851] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1901.877974] ? ___might_sleep+0x163/0x280 [ 1901.882131] __should_failslab+0x121/0x190 [ 1901.886374] should_failslab+0x9/0x14 [ 1901.890189] kmem_cache_alloc_trace+0x2d1/0x760 [ 1901.894857] ? rcu_read_lock_sched_held+0x110/0x130 [ 1901.899866] ? __kmalloc+0x5d5/0x740 [ 1901.903592] alloc_workqueue_attrs+0x82/0x120 [ 1901.908075] apply_wqattrs_prepare+0xc8/0x970 [ 1901.912578] apply_workqueue_attrs_locked+0xcb/0x140 [ 1901.917668] apply_workqueue_attrs+0x31/0x50 [ 1901.922060] alloc_workqueue+0x84c/0xe70 [ 1901.926110] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1901.931118] ? __init_waitqueue_head+0x36/0x90 [ 1901.935726] hci_register_dev+0x209/0x860 [ 1901.939868] __vhci_create_device+0x2d0/0x5a0 [ 1901.944361] vhci_write+0x2d0/0x470 [ 1901.947992] __vfs_write+0x613/0x8e0 [ 1901.951696] ? kernel_read+0x120/0x120 [ 1901.955571] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1901.961112] ? rw_verify_area+0x118/0x360 [ 1901.965268] vfs_write+0x20c/0x580 [ 1901.968797] ksys_write+0xea/0x1f0 [ 1901.972347] ? __ia32_sys_read+0xb0/0xb0 [ 1901.976407] ? do_syscall_64+0x26/0x610 [ 1901.980368] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1901.985714] ? do_syscall_64+0x26/0x610 [ 1901.989676] __x64_sys_write+0x73/0xb0 [ 1901.993563] do_syscall_64+0x103/0x610 [ 1901.997450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1902.002621] RIP: 0033:0x457f29 [ 1902.005796] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1902.024684] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1902.032388] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1902.039655] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1902.046915] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1902.054173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1902.061447] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1902.075525] Bluetooth: Can't register HCI device 05:04:25 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:04:25 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) 05:04:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x5000000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:04:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:25 executing program 4 (fault-call:1 fault-nth:18): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:25 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1912.248631] FAULT_INJECTION: forcing a failure. [ 1912.248631] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.269852] CPU: 0 PID: 6523 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1912.276721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1912.286074] Call Trace: [ 1912.288671] dump_stack+0x172/0x1f0 [ 1912.292318] should_fail.cold+0xa/0x15 [ 1912.296231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1912.301356] ? ___might_sleep+0x163/0x280 [ 1912.301380] __should_failslab+0x121/0x190 [ 1912.301402] should_failslab+0x9/0x14 [ 1912.309765] kmem_cache_alloc_node+0x264/0x710 [ 1912.309794] alloc_unbound_pwq+0x4c5/0xcf0 [ 1912.309819] apply_wqattrs_prepare+0x35e/0x970 [ 1912.326979] apply_workqueue_attrs_locked+0xcb/0x140 [ 1912.332102] apply_workqueue_attrs+0x31/0x50 [ 1912.332121] alloc_workqueue+0x84c/0xe70 [ 1912.332147] ? workqueue_sysfs_register+0x3f0/0x3f0 05:04:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xa40f000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:04:25 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 1912.340605] ? __init_waitqueue_head+0x36/0x90 [ 1912.340632] hci_register_dev+0x209/0x860 [ 1912.340656] __vhci_create_device+0x2d0/0x5a0 [ 1912.358856] vhci_write+0x2d0/0x470 [ 1912.362500] __vfs_write+0x613/0x8e0 [ 1912.366228] ? kernel_read+0x120/0x120 [ 1912.370119] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1912.375682] ? rw_verify_area+0x118/0x360 [ 1912.379838] vfs_write+0x20c/0x580 [ 1912.383393] ksys_write+0xea/0x1f0 [ 1912.386953] ? __ia32_sys_read+0xb0/0xb0 [ 1912.391030] ? do_syscall_64+0x26/0x610 [ 1912.395023] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1912.400393] ? do_syscall_64+0x26/0x610 [ 1912.404380] __x64_sys_write+0x73/0xb0 [ 1912.408275] do_syscall_64+0x103/0x610 [ 1912.412178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1912.417370] RIP: 0033:0x457f29 [ 1912.420570] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1912.439482] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:04:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000002) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:04:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0ffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1912.447199] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1912.454466] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1912.461724] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1912.468990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1912.476249] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:04:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0xffffffff00000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:04:25 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1912.587510] Bluetooth: Can't register HCI device 05:04:36 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x2302) 05:04:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa02, {0x0, 0x0}}, 0x20) 05:04:36 executing program 4 (fault-call:1 fault-nth:19): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000140)='./file1\x00', 0xc042, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) 05:04:36 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1923.125239] FAULT_INJECTION: forcing a failure. [ 1923.125239] name failslab, interval 1, probability 0, space 0, times 0 05:04:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa03, {0x0, 0x0}}, 0x20) [ 1923.166561] CPU: 0 PID: 6560 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1923.173444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.182808] Call Trace: [ 1923.185422] dump_stack+0x172/0x1f0 [ 1923.189082] should_fail.cold+0xa/0x15 [ 1923.193014] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1923.198151] ? ___might_sleep+0x163/0x280 [ 1923.202324] __should_failslab+0x121/0x190 [ 1923.206581] should_failslab+0x9/0x14 [ 1923.210411] kmem_cache_alloc+0x2b2/0x6f0 05:04:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1923.214588] __d_alloc+0x2e/0x8c0 [ 1923.218065] d_alloc+0x4d/0x2b0 [ 1923.221372] d_alloc_parallel+0xf4/0x1bc0 [ 1923.225557] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1923.230437] ? __d_lookup+0x40c/0x760 [ 1923.230485] ? lockdep_init_map+0x1be/0x6d0 [ 1923.230502] ? lockdep_init_map+0x1be/0x6d0 [ 1923.230526] __lookup_slow+0x1ab/0x500 [ 1923.230545] ? vfs_unlink+0x560/0x560 [ 1923.230569] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1923.230592] ? d_lookup+0x19e/0x260 [ 1923.230615] lookup_one_len+0x16d/0x1a0 [ 1923.230630] ? lookup_one_len_unlocked+0x100/0x100 [ 1923.230729] start_creating+0xbf/0x1e0 [ 1923.230747] debugfs_create_dir+0x26/0x3d0 [ 1923.230767] hci_register_dev+0x299/0x860 [ 1923.230791] __vhci_create_device+0x2d0/0x5a0 [ 1923.230810] vhci_write+0x2d0/0x470 [ 1923.230829] __vfs_write+0x613/0x8e0 05:04:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000001c3adde7963209aa0000004e2311b5302ff902bf40e2ce65000000"], 0x24) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 1923.230849] ? kernel_read+0x120/0x120 [ 1923.230865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1923.230922] ? rw_verify_area+0x118/0x360 [ 1923.230943] vfs_write+0x20c/0x580 [ 1923.230963] ksys_write+0xea/0x1f0 [ 1923.230982] ? __ia32_sys_read+0xb0/0xb0 [ 1923.231007] ? do_syscall_64+0x26/0x610 [ 1923.231025] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1923.231039] ? do_syscall_64+0x26/0x610 [ 1923.231059] __x64_sys_write+0x73/0xb0 [ 1923.231077] do_syscall_64+0x103/0x610 [ 1923.231098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1923.231110] RIP: 0033:0x457f29 [ 1923.231125] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1923.231134] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1923.231149] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1923.231158] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 05:04:36 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x7000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa19, {0x0, 0x0}}, 0x20) [ 1923.231166] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1923.231175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1923.231184] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:04:47 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x23020000) 05:04:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:47 executing program 4 (fault-call:1 fault-nth:20): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa50, {0x0, 0x0}}, 0x20) 05:04:47 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x148, 0x10400003) syz_genetlink_get_family_id$nbd(0x0) 05:04:47 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) 05:04:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8060000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) [ 1934.099881] FAULT_INJECTION: forcing a failure. [ 1934.099881] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.177588] CPU: 0 PID: 6624 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1934.184476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.193836] Call Trace: [ 1934.196442] dump_stack+0x172/0x1f0 [ 1934.200095] should_fail.cold+0xa/0x15 [ 1934.204019] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1934.209227] ? ___might_sleep+0x163/0x280 [ 1934.213397] __should_failslab+0x121/0x190 [ 1934.217648] should_failslab+0x9/0x14 [ 1934.221520] kmem_cache_alloc+0x2b2/0x6f0 05:04:47 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffc) geteuid() sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x80800) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f00000000c0)=0x4, 0x4) eventfd(0xfffffffffffffffd) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) [ 1934.221538] ? lookup_one_len+0x10e/0x1a0 [ 1934.221557] alloc_inode+0xb8/0x190 [ 1934.221572] new_inode_pseudo+0x19/0xf0 [ 1934.221587] new_inode+0x1f/0x40 [ 1934.221602] debugfs_get_inode+0x1a/0x130 [ 1934.221617] debugfs_create_dir+0x7a/0x3d0 [ 1934.221636] hci_register_dev+0x299/0x860 [ 1934.221660] __vhci_create_device+0x2d0/0x5a0 [ 1934.221679] vhci_write+0x2d0/0x470 [ 1934.221700] __vfs_write+0x613/0x8e0 [ 1934.221719] ? kernel_read+0x120/0x120 [ 1934.221735] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1934.221767] ? rw_verify_area+0x118/0x360 [ 1934.249695] vfs_write+0x20c/0x580 [ 1934.249719] ksys_write+0xea/0x1f0 [ 1934.249737] ? __ia32_sys_read+0xb0/0xb0 [ 1934.249756] ? do_syscall_64+0x26/0x610 [ 1934.258389] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1934.258405] ? do_syscall_64+0x26/0x610 [ 1934.258427] __x64_sys_write+0x73/0xb0 [ 1934.258445] do_syscall_64+0x103/0x610 [ 1934.311444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1934.311457] RIP: 0033:0x457f29 [ 1934.311472] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1934.311481] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1934.311495] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1934.311504] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1934.311513] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:04:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1934.311521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1934.311531] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:04:47 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x10000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x7ffffffff000) 05:04:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20) 05:04:58 executing program 4 (fault-call:1 fault-nth:21): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:04:58 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffc) geteuid() sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x80800) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f00000000c0)=0x4, 0x4) eventfd(0xfffffffffffffffd) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 05:04:58 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1ff, 0x0) 05:04:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x19, 0x0}}, 0x20) 05:04:58 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x11000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:04:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x50, 0x0}}, 0x20) 05:04:58 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1944.914604] FAULT_INJECTION: forcing a failure. [ 1944.914604] name failslab, interval 1, probability 0, space 0, times 0 05:04:58 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x14000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1944.999360] CPU: 1 PID: 6676 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1945.006242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1945.015594] Call Trace: [ 1945.018197] dump_stack+0x172/0x1f0 [ 1945.021861] should_fail.cold+0xa/0x15 [ 1945.021884] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1945.021921] ? ___might_sleep+0x163/0x280 [ 1945.021945] __should_failslab+0x121/0x190 [ 1945.021967] should_failslab+0x9/0x14 [ 1945.021986] kmem_cache_alloc+0x2b2/0x6f0 05:04:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000340)={0x7fffffff, 0x0, 'client0\x00', 0x0, "63001600", "e77af0bc275d4e83bfd556d02a6668a1a3d4dcd7bfb548f1cfe96bde4e6c1b23"}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1945.022011] __d_alloc+0x2e/0x8c0 [ 1945.022033] d_alloc+0x4d/0x2b0 [ 1945.022057] d_alloc_parallel+0xf4/0x1bc0 [ 1945.022090] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1945.022108] ? __d_lookup+0x40c/0x760 [ 1945.022127] ? lockdep_init_map+0x1be/0x6d0 [ 1945.022143] ? lockdep_init_map+0x1be/0x6d0 [ 1945.022168] __lookup_slow+0x1ab/0x500 [ 1945.022187] ? vfs_unlink+0x560/0x560 [ 1945.022211] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1945.022236] ? d_lookup+0x19e/0x260 [ 1945.022261] lookup_one_len+0x16d/0x1a0 05:04:58 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1ff, 0x0) [ 1945.022279] ? lookup_one_len_unlocked+0x100/0x100 [ 1945.022307] start_creating+0xbf/0x1e0 [ 1945.022325] debugfs_create_dir+0x26/0x3d0 [ 1945.022345] hci_register_dev+0x299/0x860 [ 1945.022371] __vhci_create_device+0x2d0/0x5a0 [ 1945.022392] vhci_write+0x2d0/0x470 [ 1945.022415] __vfs_write+0x613/0x8e0 [ 1945.022435] ? kernel_read+0x120/0x120 [ 1945.022452] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1945.022488] ? rw_verify_area+0x118/0x360 [ 1945.022517] vfs_write+0x20c/0x580 [ 1945.022542] ksys_write+0xea/0x1f0 [ 1945.022561] ? __ia32_sys_read+0xb0/0xb0 [ 1945.022581] ? do_syscall_64+0x26/0x610 [ 1945.022600] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1945.022613] ? do_syscall_64+0x26/0x610 [ 1945.022635] __x64_sys_write+0x73/0xb0 [ 1945.022654] do_syscall_64+0x103/0x610 [ 1945.022677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1945.022690] RIP: 0033:0x457f29 [ 1945.022708] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1945.022717] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1945.022733] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1945.022743] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1945.022756] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1945.022767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1945.022777] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:05:07 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0xf0ffffff7f0000) 05:05:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:05:08 executing program 4 (fault-call:1 fault-nth:22): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:05:08 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x300, 0x0}}, 0x20) 05:05:08 executing program 1: pipe(&(0x7f0000000280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) 05:05:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) [ 1955.809577] FAULT_INJECTION: forcing a failure. [ 1955.809577] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.821318] CPU: 1 PID: 6724 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1955.828490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.837851] Call Trace: [ 1955.840456] dump_stack+0x172/0x1f0 [ 1955.844118] should_fail.cold+0xa/0x15 [ 1955.848025] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1955.853144] ? ___might_sleep+0x163/0x280 [ 1955.857304] __should_failslab+0x121/0x190 [ 1955.862559] should_failslab+0x9/0x14 [ 1955.866375] kmem_cache_alloc+0x2b2/0x6f0 [ 1955.870547] ? lookup_one_len+0x10e/0x1a0 [ 1955.874733] alloc_inode+0xb8/0x190 [ 1955.878367] new_inode_pseudo+0x19/0xf0 [ 1955.882344] new_inode+0x1f/0x40 [ 1955.885714] debugfs_get_inode+0x1a/0x130 [ 1955.889873] debugfs_create_dir+0x7a/0x3d0 [ 1955.894116] hci_register_dev+0x299/0x860 [ 1955.898275] __vhci_create_device+0x2d0/0x5a0 [ 1955.902785] vhci_write+0x2d0/0x470 [ 1955.906426] __vfs_write+0x613/0x8e0 [ 1955.910148] ? kernel_read+0x120/0x120 [ 1955.914304] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1955.919872] ? rw_verify_area+0x118/0x360 [ 1955.924035] vfs_write+0x20c/0x580 [ 1955.927589] ksys_write+0xea/0x1f0 [ 1955.931150] ? __ia32_sys_read+0xb0/0xb0 [ 1955.935223] ? do_syscall_64+0x26/0x610 [ 1955.939226] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1955.944604] ? do_syscall_64+0x26/0x610 [ 1955.948590] __x64_sys_write+0x73/0xb0 [ 1955.952485] do_syscall_64+0x103/0x610 05:05:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xfa4, 0x0}}, 0x20) 05:05:08 executing program 1: pipe(&(0x7f0000000280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) 05:05:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x28000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:09 executing program 1: pipe(&(0x7f0000000280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) 05:05:09 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3f000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1955.956387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1955.961575] RIP: 0033:0x457f29 [ 1955.964767] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1955.983667] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1955.983683] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1955.983692] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1955.983700] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1955.983709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1955.983721] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:05:17 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x2302000000000000) 05:05:17 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 05:05:19 executing program 4 (fault-call:1 fault-nth:23): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:05:19 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x40000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1900, 0x0}}, 0x20) 05:05:19 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 05:05:19 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) [ 1966.670894] FAULT_INJECTION: forcing a failure. [ 1966.670894] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.688971] CPU: 0 PID: 6765 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1966.695837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.705184] Call Trace: [ 1966.707765] dump_stack+0x172/0x1f0 [ 1966.711489] should_fail.cold+0xa/0x15 [ 1966.715368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1966.720538] ? ___might_sleep+0x163/0x280 [ 1966.724686] __should_failslab+0x121/0x190 [ 1966.729014] should_failslab+0x9/0x14 [ 1966.732806] __kmalloc_track_caller+0x2d8/0x740 [ 1966.737466] ? __d_instantiate+0x383/0x470 [ 1966.741752] ? find_held_lock+0x35/0x130 [ 1966.745818] ? kstrdup_const+0x66/0x80 [ 1966.749710] kstrdup+0x3a/0x70 [ 1966.752890] kstrdup_const+0x66/0x80 [ 1966.756595] kvasprintf_const+0x10e/0x190 [ 1966.760735] kobject_set_name_vargs+0x5b/0x150 [ 1966.765459] dev_set_name+0xbd/0xf0 [ 1966.769087] ? device_initialize+0x440/0x440 [ 1966.773490] hci_register_dev+0x2e0/0x860 [ 1966.777629] __vhci_create_device+0x2d0/0x5a0 [ 1966.782110] vhci_write+0x2d0/0x470 [ 1966.785728] __vfs_write+0x613/0x8e0 [ 1966.789443] ? kernel_read+0x120/0x120 [ 1966.793337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1966.798871] ? rw_verify_area+0x118/0x360 [ 1966.803013] vfs_write+0x20c/0x580 [ 1966.806598] ksys_write+0xea/0x1f0 [ 1966.810246] ? __ia32_sys_read+0xb0/0xb0 [ 1966.814301] ? do_syscall_64+0x26/0x610 [ 1966.818267] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.823620] ? do_syscall_64+0x26/0x610 [ 1966.827708] __x64_sys_write+0x73/0xb0 [ 1966.831584] do_syscall_64+0x103/0x610 [ 1966.835464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.840636] RIP: 0033:0x457f29 [ 1966.843813] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1966.862839] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:05:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x5000, 0x0}}, 0x20) 05:05:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 05:05:20 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x43050000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1966.870531] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1966.877885] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1966.885140] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1966.892405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1966.899717] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1966.915358] Bluetooth: Can't register HCI device 05:05:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xa40f, 0x0}}, 0x20) 05:05:20 executing program 4 (fault-call:1 fault-nth:24): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1967.026561] FAULT_INJECTION: forcing a failure. [ 1967.026561] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.042066] CPU: 1 PID: 6786 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1967.048900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.058245] Call Trace: [ 1967.060826] dump_stack+0x172/0x1f0 [ 1967.064446] should_fail.cold+0xa/0x15 [ 1967.068318] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1967.073414] ? ___might_sleep+0x163/0x280 [ 1967.077556] __should_failslab+0x121/0x190 [ 1967.081782] should_failslab+0x9/0x14 [ 1967.085572] kmem_cache_alloc+0x2b2/0x6f0 [ 1967.089795] __kernfs_new_node+0xef/0x690 [ 1967.093948] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1967.098716] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1967.104266] ? find_held_lock+0x35/0x130 [ 1967.108407] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1967.113868] ? kasan_check_write+0x14/0x20 [ 1967.118105] kernfs_new_node+0x99/0x130 [ 1967.122071] kernfs_create_link+0xdd/0x250 [ 1967.126295] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 1967.131676] sysfs_create_link+0x65/0xc0 [ 1967.135732] device_add+0x663/0x18a0 [ 1967.139452] ? get_device_parent.isra.0+0x570/0x570 [ 1967.144463] ? start_creating+0x163/0x1e0 [ 1967.148671] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1967.154212] hci_register_dev+0x2e8/0x860 [ 1967.158465] __vhci_create_device+0x2d0/0x5a0 [ 1967.163051] vhci_write+0x2d0/0x470 [ 1967.166676] __vfs_write+0x613/0x8e0 [ 1967.170381] ? kernel_read+0x120/0x120 [ 1967.174262] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1967.179808] ? rw_verify_area+0x118/0x360 [ 1967.183976] vfs_write+0x20c/0x580 [ 1967.187605] ksys_write+0xea/0x1f0 [ 1967.191135] ? __ia32_sys_read+0xb0/0xb0 [ 1967.195293] ? do_syscall_64+0x26/0x610 [ 1967.199272] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.204649] ? do_syscall_64+0x26/0x610 [ 1967.208657] __x64_sys_write+0x73/0xb0 [ 1967.212539] do_syscall_64+0x103/0x610 [ 1967.216422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.221595] RIP: 0033:0x457f29 [ 1967.224821] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1967.243722] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1967.251486] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1967.258757] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1967.266028] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1967.273385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1967.280642] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1967.299723] Bluetooth: Can't register HCI device 05:05:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0xfffffffffffffd99) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x8000, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) 05:05:28 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x60000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 05:05:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xfaffff, 0x0}}, 0x20) 05:05:28 executing program 4 (fault-call:1 fault-nth:25): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1974.979913] FAULT_INJECTION: forcing a failure. [ 1974.979913] name failslab, interval 1, probability 0, space 0, times 0 05:05:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1000000, 0x0}}, 0x20) [ 1975.025734] CPU: 1 PID: 6798 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1975.032624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.041981] Call Trace: [ 1975.042011] dump_stack+0x172/0x1f0 [ 1975.042043] should_fail.cold+0xa/0x15 [ 1975.042071] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1975.057240] ? ___might_sleep+0x163/0x280 [ 1975.061403] __should_failslab+0x121/0x190 [ 1975.065652] should_failslab+0x9/0x14 [ 1975.069466] kmem_cache_alloc+0x2b2/0x6f0 [ 1975.073626] ? kasan_check_write+0x14/0x20 [ 1975.077874] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1975.082734] __kernfs_new_node+0xef/0x690 [ 1975.086896] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1975.086916] ? mutex_unlock+0xd/0x10 [ 1975.086942] ? kernfs_activate+0x192/0x1f0 [ 1975.086965] ? __lock_acquire+0x548/0x3fb0 [ 1975.086983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.109435] kernfs_new_node+0x99/0x130 [ 1975.113457] __kernfs_create_file+0x51/0x340 [ 1975.117876] sysfs_add_file_mode_ns+0x222/0x560 [ 1975.117901] sysfs_create_file_ns+0x13d/0x1d0 [ 1975.118037] ? acpi_unbind_one+0x4a0/0x4a0 [ 1975.118055] ? sysfs_add_file_mode_ns+0x560/0x560 [ 1975.136279] ? kasan_check_write+0x14/0x20 [ 1975.140575] ? dev_fwnode+0xd/0x40 [ 1975.144138] device_create_file+0xfa/0x1e0 [ 1975.148388] device_add+0x5cd/0x18a0 [ 1975.152117] ? device_initialize+0x440/0x440 [ 1975.156534] ? get_device_parent.isra.0+0x570/0x570 [ 1975.161555] ? start_creating+0x163/0x1e0 [ 1975.165721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1975.171271] hci_register_dev+0x2e8/0x860 [ 1975.175434] __vhci_create_device+0x2d0/0x5a0 [ 1975.175454] vhci_write+0x2d0/0x470 [ 1975.175477] __vfs_write+0x613/0x8e0 [ 1975.175496] ? kernel_read+0x120/0x120 [ 1975.175510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1975.175541] ? rw_verify_area+0x118/0x360 [ 1975.201287] vfs_write+0x20c/0x580 [ 1975.201309] ksys_write+0xea/0x1f0 [ 1975.201327] ? __ia32_sys_read+0xb0/0xb0 [ 1975.201360] __x64_sys_write+0x73/0xb0 [ 1975.201377] ? do_syscall_64+0x79/0x610 [ 1975.201394] do_syscall_64+0x103/0x610 [ 1975.201418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1975.201431] RIP: 0033:0x457f29 [ 1975.201446] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1975.201455] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1975.201470] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1975.201479] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1975.201488] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1975.201497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1975.201505] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1975.234183] Bluetooth: Can't register HCI device 05:05:30 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, 0x0, 0x223) 05:05:30 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800e0000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000340)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') 05:05:30 executing program 4 (fault-call:1 fault-nth:26): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:05:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2000000, 0x0}}, 0x20) 05:05:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3000000, 0x0}}, 0x20) [ 1976.899708] FAULT_INJECTION: forcing a failure. [ 1976.899708] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.920177] devpts: called with bogus options [ 1976.931640] CPU: 0 PID: 7023 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1976.938502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.947865] Call Trace: [ 1976.950469] dump_stack+0x172/0x1f0 [ 1976.954120] should_fail.cold+0xa/0x15 [ 1976.954145] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1976.954170] ? ___might_sleep+0x163/0x280 [ 1976.954193] __should_failslab+0x121/0x190 [ 1976.954215] should_failslab+0x9/0x14 [ 1976.963188] __kmalloc_track_caller+0x2d8/0x740 [ 1976.971539] ? find_held_lock+0x35/0x130 [ 1976.971627] ? console_unlock+0x714/0x10a0 [ 1976.971646] ? kstrdup_const+0x66/0x80 [ 1976.980097] kstrdup+0x3a/0x70 [ 1976.980116] kstrdup_const+0x66/0x80 [ 1976.980134] __kernfs_new_node+0xb0/0x690 [ 1976.980153] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1976.980225] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1977.012762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1977.012861] ? irq_work_queue+0x36/0x1d0 [ 1977.022387] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1977.022410] ? wake_up_klogd+0x99/0xd0 [ 1977.031834] kernfs_new_node+0x99/0x130 [ 1977.035822] kernfs_create_dir_ns+0x52/0x160 [ 1977.040239] sysfs_create_dir_ns+0x131/0x2a0 [ 1977.044645] ? sysfs_create_mount_point+0xa0/0xa0 [ 1977.049493] ? class_dir_child_ns_type+0xd/0x60 [ 1977.054163] kobject_add_internal.cold+0xe5/0x5d4 [ 1977.058994] kobject_add+0x150/0x1c0 [ 1977.062705] ? kset_create_and_add+0x1a0/0x1a0 [ 1977.067275] ? kasan_check_read+0x11/0x20 [ 1977.071410] ? mutex_unlock+0xd/0x10 [ 1977.075110] device_add+0x3d5/0x18a0 [ 1977.078811] ? device_initialize+0x440/0x440 [ 1977.083204] ? get_device_parent.isra.0+0x570/0x570 [ 1977.088219] hci_register_dev+0x2e8/0x860 [ 1977.092357] __vhci_create_device+0x2d0/0x5a0 [ 1977.096839] vhci_write+0x2d0/0x470 [ 1977.100475] __vfs_write+0x613/0x8e0 [ 1977.104187] ? kernel_read+0x120/0x120 [ 1977.108060] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1977.113600] ? rw_verify_area+0x118/0x360 [ 1977.117735] vfs_write+0x20c/0x580 [ 1977.121266] ksys_write+0xea/0x1f0 [ 1977.124790] ? __ia32_sys_read+0xb0/0xb0 [ 1977.128853] ? do_syscall_64+0x26/0x610 [ 1977.132826] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.138175] ? do_syscall_64+0x26/0x610 [ 1977.142136] __x64_sys_write+0x73/0xb0 [ 1977.146016] do_syscall_64+0x103/0x610 [ 1977.149900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.155085] RIP: 0033:0x457f29 [ 1977.158311] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1977.177211] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1977.184902] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1977.192161] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1977.199413] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1977.206665] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1977.213935] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1977.223171] kobject_add_internal failed for hci1 (error: -12 parent: bluetooth) [ 1977.236916] Bluetooth: Can't register HCI device 05:05:38 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) fadvise64(r0, 0x0, 0xb, 0x4) 05:05:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x80350000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:38 executing program 4 (fault-call:1 fault-nth:27): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:05:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x19000000, 0x0}}, 0x20) 05:05:38 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$UHID_INPUT(r0, &(0x7f0000000480)={0x8, "213da31c9e381e9bed3954425f981163cea60b71a1f0fbbee5e997b074a5c3ba1ed4f7bdaa9d30c57e0683d01bfca4b35d838fa6923676eab641906c0f8ec73821fca69d80699c2cc21e7520b2c26ea4a4abf65f7e6ecfa2a631d3587178004ff0917b0ef70adf83097f25a0ba7681335fcec193beacb176e685d1eb9bcc10483d6626ed0aeb77236e173cc76b0a079a451e8fbb4e65d0fe06bacca6a20aff3b22734d43abdd2855110a03851aaff4cb51efb833d14c541cb508b9d0c6405a6dd6bb0794de99f7a72227aea94d6a1932b51f3178d863488e0e87700045bef5c32342e166292ff4ac3cd7bd4810de0b5e835375373c971bfc66effa89a600721542a10921b7c7e3054decddda1331411e2ef0f50e73d3387c62e921b515f3a9d1be7b998ef1ed637c74c54fdc273487ce1a46564c045367f7089e90aa312fce98de7362160f8d8daca06465e66a7f9ac8a988d0ce41b64fff02dd8291690aee613af201426c5f5415bdbdcf332c74f33f124131668be623b4f5696b56df7b9505c7161e4d669f508afb46851723a953cebdce947fb781909aa7c1350a209c91fed939422e0a18c39c195f7d0c912b14c9bd8c1793c0a50ba10857ab47720279ee14970ca9eb040fbad67b2a6058c0b894cc44c43091ca03bf3690826ceba91c5c7130f5f12a70a245efcfc1b9a1e50d0144642b13dd1be1a368f53059be4ca77c78bddf0f4f6c4a54f80aa8812e135bc2477f262f31a3f4138428b18ae7ceb6d5909998ffa1b8a5de01812e4985d320d8159ead579cc82f2bf485c0b7ef7fbc658540ef5939610755ed25ed8a6994fc0ad487d72ad40090547ded663c9a83b5bc054ca56e0660513c39561fe2297a6ebd074663a233671e39ff556e44d9ef2e111409fedb04bbaba2bb783a8752832ef28956bdb183dc8907cc8cb294a6eae274ca636b14e854ad53b81ce1e8cc8e4136a9d099c19cdaba6aceedb7ef85927b055a389a0f9da02914202df866bdf435d8bcd52aca559d7af540a867c62c6808f5fbf332cf1b09ee71d77257ee76f343627b01eb4356fb6fa800bb7564c4a1202f7592a8d7f00570f3ad6b7b4b09b217f86b31f1b05ca389005db1db6fc18980327e4e1304c9294b163a32d1fff500006bf4c2127162ea47b366718274077a97431bf605d68690756c03b2cdd196fadd3fb9fa782bf0555d6d45e7ae938adba93fabdea98ef1b706dd415bc7796ddca1e4acfb5a18423edcb3265a0c34d5d34c2d39a0d4559096e492ff4f31957860be49586a55022f6bb2b3414b236bb6211c0d65ec6dcd3e11892a6b32731c1440b28bfc9b31accb3753b0303bad4bf3bbef7b28ab130621f1f078289e21e36378d28e468c9f25f5c1541e7e8c83d7e152fafdefdb23916aa627763bc5c08a6f7f36c6c38f72ea51aba495330c7c788b08f11d9cbd30f65b1a9789087dc80790d86adebc8d26687dfba7794b59b3ed4d82a02c8f77dadcb56b5d607b8712332f7a1d4d76437ea5cfcce982a7bd9fbca8125d719ce9b33ce205303682272a2359157cdca84709e2f16834dd61330b8c1d3e7756fd980ac7983aaa5678ed68dda7e69ef0bfd10ddb32e5cb8b05f2e5af4723b1327e44fafcd1e71ddd3555a49108f5ac61cbe6f7701ec0c2d917c007211434c6448a47c38f6436c19fd92ed68c00b32bf0943d1642cdcf650717d26e0ea0cafcb8d7a20a370c1c748d06501ed7c66178f7c18c4d466e3f2befcd96e2fad3928ae6974468a3e1a0630f97b813d65b10458354ac8ca66ef4aef303ee5a667551f301292fa45a3effff5db214f54907cc3e9bed367ecdd116846577c06c4d9a0cddc517569cc309a610c7a743bf70e2835b5d02ba4230792f619d08e34d3e9b386f1840a9139aafbd3ec1f4ffab16afec74d873882d0a3752ae30f1f88ceec47a44f16e511efae8625ce149dc7f153e3536e387ee49676b213b0808535c2a6628181c3fd2d6d7047efc05bed6f2dbaf488fa6f491b65de6189b834eb7c9ab0b9f39c758d0bd7e01932cc58be5919e1bf2747f3e0273b4e5c2a4068787c16068a9f3d6cf3dcb08f9d4aca662df4bdcea41aea8b332ba4c76e9d09be81285f3aa128fb29896e2dedd52d12a3fff2c5a5b92dce251ec47970f9454a45bbb24caf7771daa70c179cab7f71f1a25760b6ea627ddf09c5bdc6f9291af2f985f60e804f7486746003c9fbec18fac0498a3d0c66c9a2351b67c91855dc58e532a1ba0c3dc804a38254badd7a1a69c63c86dbdbdd1ff33a8b2936446535271ce7177371ea10a1195a37e8824cfdbb6aeb9ff1cc72e59007e94ba9cf68fdba73afccacc98df61c65b62cbfed3c881b78f1a868ca483758f60be78a5a4ee00a4c35d939aed0cb92b8fa8ce9862174e1dab79db23c0877be20e61b3afe735718ef99771afdc9349721849ca0bef90181cf3f0646947069ab2a8dc18fdeec45fb299478e93ff9c732dedae2e8c3393c706f08ca48de956745b999007009e9f2be9ea4720418f22d6662a157cabced0342dd23147247d2268b2e7860347991dfe36ec9484ab39a2e0b592a693e98b061fb680b637264a7dee0af49347aadee9b15d43e693776350533168b95a5d32e86d5d46670176b00860d5f7c4ccb9a18594a98bbe2ee20fb1d229634d0cd16345b00586c3bb7e035d3cf74714704f9fa83552761b079928a5f470571a58c342065782eaf96dad50f33c64809d92452e3466899add5822c5149cb53873582762e2aff5a36f73438762e52db3bcb205ea1147401637689f9e0579ea332d5c9c124317bb6b78adafe41276d06161b0352c2a9821704f1bca915f23d9847fb41d7cebca1e898b223edb8f4268bea30b15a4ce1716bdba38b02d231ecc2c560e0894ca65b7ce7ce53c3304a115699dca616e72d6bbb59492afce71f937f0b38ffd1c46c4611638706fede74b93e74df209d25ca208c805aae139d92f87a0d67224fdb014f05c6f41ee093f33a41eb05169f1878dc9186b31f9edceb3d096718f84b1c09fba1f962dd50aeca16f843fbc9f6313754965e7abbf754cc582f884b42f102f5539eb1aebcd06c2c94527d3acdd200794abad059a3089d13d7489cc4a6ae6d4d1ca52079a16f3c4484567cbd79e7ab5547e671aa692e491737ad13245d6d5c6c7f6fa165330cef706f77fedc9522ceeea52b73545458f46d9d1332c5f84feaee1273bf7dcc04e06ef8398fd24580c7c8f8d7b1d26104b95bbd2108c3c6e2cf2ecc28f99ddf938a8062c2edf06f63e05585e4f402bc1cf7d76b95e33a8b9f2868fc9ac1afed9b66823a21408b17dc27cf95da9a4cc700c6014384215d9269d996293946d939438ae34c817a8d710c3299aff377db0d110dfa55dba9a5c1f3926b460fb5f8faf1c55809b579ab828a1b0f78c4ea4416677eaa13415172848a682c9f5009c0df53d6456b9163f2e9319c28c99207e914e1d59f332ff8131dec68e65db12af7b4b38eaa634395586ecef7a7d5c8880eaa9c7c6edab92749d3be42bbada412299aaef2089bb8f4181e57e0a193e1101b07bd5c2675e12d7b00c588471d54c24e39538ccaa596fc6718db865387b059419a1d4ebbc27f6f124873abc7232fdee60ae7230c36f8fc292277f733303f9f8387bffb193395a8a7c183956c1c3d6fcef0fd4464ed71a0f69d5e48aa8ff19c7e58f39d942a821c8262d688c9a82e9cce3a7ff4fc9d3dc4d2a7ef5b4af204dcd1dc0b8567a601f26b06bda28e0687b1dbae4d5b2f40efa84fcca9210e16af58d0f5d20158d704ee697d56f65110ec4bf132e4ec37e89810821faa4488a92fbab7e47cf6debf79088632c442db2e909616d9b8e51fd11e250eb236554577d4643a86919ecba3da5c8da38ad8f359df2b655f496693672ea4f14004e59751fc1ece10ef6b4a3823f44719214d4440458fdceb63e9e088e31beb5d113ed2f1edae6556c6776403326b93058628a2f8a839fab0d661d3124f3ce909f3c8e3ad94da381453fe5aa94a1d59867ee476a2d194d28077206a9122723dda80624a878f91c417f56ad1781047a936784c6b1e4f6f6873396285cdba5462033aaf71a15a010dc2e3dbb21d95f19bc5771e1773fb92ac65569be83a940251cef71338730a8a6df8a624b6c5342a33eee5121da8e84f367c5c643b8a179ff63595168c3bab3902f1f8f63fbc09f5b2fbf9406db1fff8e40b6f50336029f67982755de2cea66ba337d7b33aeb7ac3f6f24491ab452ddd5f2c4bf998712d75ef07be8a51b8341341ccdde389d4b891397ba83184e76bccfe21f734d6db9c16ed78a54a16d6482ea4cec0f32d00710639d7c5f79c842ce56328e570dab7989ada620d2e0e7b80a6d4973d354c8c399900974caf7697cfbe64d7066c8a13ad523ba177207857b2ec9c9fecada64bbead730352c77f9f49ddcb2794b0007864876084ccdbc42b77810985c1f524f53ccc9cd5bef1c2a170400be4e5e002ab19bf1403bcba4e47038f2a6c606fdf8de33bc3d564532f75e2c98b5b3d0b0238763ab782278f921f4556982a09f08ebd96aa02dcce6ebebac8696382f6e5836d80dc9d92473442728ed1c4ff90d7064552950d373503647a808219e08307041a93ca80a02352b84aae0ec3313da4c0ad5f86f3360e1fab3e04355636b905cc21e54ab0e3b020eaa49213a16b18c5e44fe42259a1bb7078a76c6ef86da3d0d44b358fb8603d0b7f60f8576bf4b7a124a504164e553af087dd96f6061e0dc0ac6b312ad9158cd40172b69ddf54324094be07e47b5cfebb60bde78fd80079cd268967a9fa943235c96d4dbf34919f08c342e4078ce6ad7fd46c556241dfe7a507643225c680aea2af577bb8546fd340994cb8633592e8235d2febd61f919ccaf0f1f021165447beeabf17a6d180c61e8312701f613fde82add18eadd9d19c8fce3911f8ad3d7c401008bbc63c475ea903296f1ca214a06eb84e053b371b9b79119a47b453f44a7d766ef4ee7ac00549cc3844c7a975b230fb9099d48b2f95692ed84d55cc985c9a5b566717274f2ce8c1d617a836aa242de2ea9d862f10cb5c361e465da4df0f9e4f2f130f96d010debc5f0f2c820cf1d850ad3e4783b7ee5012422af32dfcef8cb8cbf0e8b2e4019795650c6aa6714711bb6d3fa4bfc689192c30c4e56d10a70591b8ec8c5e990396dda78f9171c08bdeb9e642a0d81a1279b05bedbe798a14bbeb55132a097f15343140fd32bd0330153a6f05e08f5acc6d5436aee404bcb3508b001c8865fc4f3306bfaf7324692bb74e349ce2ce7630c696e7a9d0a43e0b92ae15628823abd6b184fb05aede6c3f3ee18058c7ab222761441cd873105ecefeb5bbcd2fa7a78b6b06f4d61b89c85779e359288049a7cb17723262fc59c105545030f7320e85102426c58240328b070b4523cfca9a2e24b04642b2a53a7dee769071bc6275bfe7c19188a34384e9d27408cfa12cf029d714f950199fdca55fba22feac0188b15caf0d71c91e393c1c9acabcf1471f6be9ddb98aafbd4e66a221b65d80d11fd89c6d5900532e9718811fbd0e17e4f9f279e7d2033737f1aecbfb3fb24dbea59fbb371ec4722c13b48a9c89824b2948074fb1af627bd65849d73187f0fcd534c1ab511b6c2b1a410378241e629fe488efc965bc6e59aa0766aee5248bf3c1846d7ef4197aff26c751bdd00f0387b4581b40ee25c710cc3f7d0eee866d48ad378e62b0ae0c701e1608821c1e9191dcc134628c6cf725ec7fc1774228faf00a110fc64e29f25", 0x1000}, 0x1006) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1) 05:05:38 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, 0x0, 0x223) [ 1985.197193] FAULT_INJECTION: forcing a failure. [ 1985.197193] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.221446] CPU: 0 PID: 7142 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1985.228308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.237665] Call Trace: [ 1985.240322] dump_stack+0x172/0x1f0 [ 1985.243983] should_fail.cold+0xa/0x15 [ 1985.247886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1985.253004] ? ___might_sleep+0x163/0x280 [ 1985.257171] __should_failslab+0x121/0x190 [ 1985.261420] should_failslab+0x9/0x14 [ 1985.265232] kmem_cache_alloc+0x2b2/0x6f0 [ 1985.269400] __kernfs_new_node+0xef/0x690 [ 1985.273862] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1985.278629] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1985.284086] ? find_held_lock+0x35/0x130 [ 1985.284105] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 05:05:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x50000000, 0x0}}, 0x20) 05:05:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x81000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1985.284124] ? kasan_check_write+0x14/0x20 [ 1985.284143] kernfs_new_node+0x99/0x130 [ 1985.284162] kernfs_create_link+0xdd/0x250 [ 1985.284182] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 1985.284201] sysfs_create_link+0x65/0xc0 [ 1985.284216] device_add+0x663/0x18a0 [ 1985.293728] ? get_device_parent.isra.0+0x570/0x570 [ 1985.293744] ? start_creating+0x163/0x1e0 [ 1985.293762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1985.293783] hci_register_dev+0x2e8/0x860 [ 1985.306202] __vhci_create_device+0x2d0/0x5a0 [ 1985.306223] vhci_write+0x2d0/0x470 [ 1985.306248] __vfs_write+0x613/0x8e0 [ 1985.315564] ? kernel_read+0x120/0x120 [ 1985.315581] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1985.315615] ? rw_verify_area+0x118/0x360 [ 1985.315634] vfs_write+0x20c/0x580 [ 1985.315654] ksys_write+0xea/0x1f0 [ 1985.315672] ? __ia32_sys_read+0xb0/0xb0 [ 1985.315690] ? do_syscall_64+0x26/0x610 [ 1985.324396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.324412] ? do_syscall_64+0x26/0x610 [ 1985.324433] __x64_sys_write+0x73/0xb0 [ 1985.324452] do_syscall_64+0x103/0x610 05:05:38 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r2, 0x0, 0x4008048) chdir(&(0x7f0000000180)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000100)=0x56, 0x4) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000001c0)) getuid() syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./bus\x00', 0x3, 0x1, &(0x7f0000000700)=[{0x0}], 0x0, 0x0) msgget(0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r6, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 1985.324473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.324486] RIP: 0033:0x457f29 [ 1985.324500] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.324509] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1985.324523] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1985.324530] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 05:05:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x86ddffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1985.324538] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1985.324548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1985.324559] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:05:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xa40f0000, 0x0}}, 0x20) [ 1985.557921] Bluetooth: Can't register HCI device 05:05:38 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88470000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:49 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x81, 0x80, 0x3, 'queue1\x00', 0x5}) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x0, 0x4, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 05:05:49 executing program 4 (fault-call:1 fault-nth:28): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:05:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xfffffa00, 0x0}}, 0x20) 05:05:49 executing program 1: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") writev(r0, &(0x7f00006c4f60)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x0, 0xffffff7f, &(0x7f00000fff80), 0x0, &(0x7f00001e1e78), 0xc00}], 0x4924924924926c8, 0x0) 05:05:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88480000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:05:49 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, 0x0, 0x223) 05:05:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xfaffff00000000, 0x0}}, 0x20) [ 1996.088515] FAULT_INJECTION: forcing a failure. [ 1996.088515] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.116705] CPU: 0 PID: 7494 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1996.123580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.123587] Call Trace: [ 1996.123616] dump_stack+0x172/0x1f0 [ 1996.123645] should_fail.cold+0xa/0x15 [ 1996.123668] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1996.123692] ? ___might_sleep+0x163/0x280 [ 1996.123714] __should_failslab+0x121/0x190 [ 1996.123744] should_failslab+0x9/0x14 [ 1996.160793] __kmalloc_track_caller+0x2d8/0x740 [ 1996.165475] ? kernfs_activate+0x192/0x1f0 [ 1996.169721] ? kstrdup_const+0x66/0x80 [ 1996.173617] kstrdup+0x3a/0x70 [ 1996.176820] kstrdup_const+0x66/0x80 [ 1996.180534] __kernfs_new_node+0xb0/0x690 [ 1996.180554] ? kernfs_dop_revalidate+0x3c0/0x3c0 05:05:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88640000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1996.180577] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1996.180594] ? find_held_lock+0x35/0x130 [ 1996.198979] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 1996.204446] ? kasan_check_write+0x14/0x20 [ 1996.208694] kernfs_new_node+0x99/0x130 [ 1996.208716] kernfs_create_link+0xdd/0x250 [ 1996.208737] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 1996.208754] sysfs_create_link+0x65/0xc0 [ 1996.226255] device_add+0x78f/0x18a0 [ 1996.229979] ? get_device_parent.isra.0+0x570/0x570 [ 1996.229996] ? start_creating+0x163/0x1e0 05:05:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88a8ffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1996.230014] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1996.230044] hci_register_dev+0x2e8/0x860 [ 1996.248870] __vhci_create_device+0x2d0/0x5a0 [ 1996.253375] vhci_write+0x2d0/0x470 [ 1996.257024] __vfs_write+0x613/0x8e0 [ 1996.260756] ? kernel_read+0x120/0x120 [ 1996.264648] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1996.270208] ? rw_verify_area+0x118/0x360 [ 1996.270229] vfs_write+0x20c/0x580 [ 1996.270250] ksys_write+0xea/0x1f0 [ 1996.270267] ? __ia32_sys_read+0xb0/0xb0 [ 1996.285528] ? do_syscall_64+0x26/0x610 [ 1996.289513] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.294887] ? do_syscall_64+0x26/0x610 [ 1996.298874] __x64_sys_write+0x73/0xb0 [ 1996.302769] do_syscall_64+0x103/0x610 [ 1996.306678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.311871] RIP: 0033:0x457f29 [ 1996.315075] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:05:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88caffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1996.333975] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1996.333990] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1996.333999] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1996.334008] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1996.334016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1996.334025] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1996.380239] Unknown ioctl -1064545482 05:05:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0x20) [ 1996.393112] Bluetooth: Can't register HCI device [ 1996.394634] Unknown ioctl 35304 05:05:49 executing program 4 (fault-call:1 fault-nth:29): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 1996.519286] FAULT_INJECTION: forcing a failure. [ 1996.519286] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.567777] CPU: 0 PID: 7560 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 1996.574644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.583988] Call Trace: [ 1996.586581] dump_stack+0x172/0x1f0 [ 1996.590211] should_fail.cold+0xa/0x15 [ 1996.594102] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1996.599215] ? ___might_sleep+0x163/0x280 [ 1996.603363] __should_failslab+0x121/0x190 [ 1996.607590] should_failslab+0x9/0x14 [ 1996.611379] kmem_cache_alloc+0x2b2/0x6f0 [ 1996.615517] __kernfs_new_node+0xef/0x690 [ 1996.619654] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1996.624403] ? lock_downgrade+0x880/0x880 [ 1996.628542] ? mutex_trylock+0x1e0/0x1e0 [ 1996.632592] kernfs_new_node+0x99/0x130 [ 1996.636558] __kernfs_create_file+0x51/0x340 [ 1996.640964] sysfs_add_file_mode_ns+0x222/0x560 [ 1996.645642] sysfs_merge_group+0x1a0/0x340 [ 1996.649880] ? sysfs_mount+0x1e0/0x1e0 [ 1996.653751] ? kernfs_put+0x3e3/0x600 [ 1996.657544] dpm_sysfs_add+0x21d/0x270 [ 1996.661427] device_add+0xa20/0x18a0 [ 1996.665139] ? get_device_parent.isra.0+0x570/0x570 [ 1996.670138] ? start_creating+0x163/0x1e0 [ 1996.674286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1996.679828] hci_register_dev+0x2e8/0x860 [ 1996.683991] __vhci_create_device+0x2d0/0x5a0 [ 1996.688498] vhci_write+0x2d0/0x470 [ 1996.692142] __vfs_write+0x613/0x8e0 [ 1996.695846] ? kernel_read+0x120/0x120 [ 1996.699723] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1996.705272] ? rw_verify_area+0x118/0x360 [ 1996.709419] vfs_write+0x20c/0x580 [ 1996.712954] ksys_write+0xea/0x1f0 [ 1996.716493] ? __ia32_sys_read+0xb0/0xb0 [ 1996.720557] ? do_syscall_64+0x26/0x610 [ 1996.724518] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.729866] ? do_syscall_64+0x26/0x610 [ 1996.733827] __x64_sys_write+0x73/0xb0 [ 1996.737719] do_syscall_64+0x103/0x610 [ 1996.741593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.746764] RIP: 0033:0x457f29 [ 1996.749951] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1996.768838] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1996.776531] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 1996.783785] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1996.791042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1996.798306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 1996.805569] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 1996.820723] Bluetooth: Can't register HCI device 05:06:00 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2be) write$vhci(r0, &(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, "a5f2d447a8092df4ec4c8d6848f80981f01c2c7babc4985e51b62a386b2e6e6475f6062d"}, 0x25) read(r0, 0x0, 0x0) 05:06:00 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x89060000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:06:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x200000000000000, 0x0}}, 0x20) 05:06:49 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x1) 05:06:49 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, 0x0, 0x223) 05:06:49 executing program 4 (fault-call:1 fault-nth:30): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:06:49 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xffffa888, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:06:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x300000000000000, 0x0}}, 0x20) 05:06:49 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x30500) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x7fff, 0x7}, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@dev, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', r2}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000280)=0x1e) [ 2056.603249] FAULT_INJECTION: forcing a failure. [ 2056.603249] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.633705] CPU: 1 PID: 7741 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2056.640599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.649968] Call Trace: [ 2056.652573] dump_stack+0x172/0x1f0 [ 2056.656224] should_fail.cold+0xa/0x15 [ 2056.660134] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2056.665250] ? find_held_lock+0x35/0x130 [ 2056.669412] ? __debug_object_init+0x190/0xc30 [ 2056.674005] __should_failslab+0x121/0x190 [ 2056.678249] should_failslab+0x9/0x14 [ 2056.682059] kmem_cache_alloc+0x47/0x6f0 [ 2056.686138] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2056.690800] ? trace_hardirqs_on+0x67/0x230 [ 2056.690818] ? kasan_check_read+0x11/0x20 [ 2056.699283] __debug_object_init+0x755/0xc30 [ 2056.699301] ? __debug_object_init+0x190/0xc30 [ 2056.699322] ? debug_object_fixup+0x30/0x30 [ 2056.699338] ? debug_object_fixup+0x30/0x30 [ 2056.708311] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2056.708335] debug_object_init+0x16/0x20 [ 2056.708403] hrtimer_init+0x2a/0x300 [ 2056.708453] pm_runtime_init+0x2ce/0x3b0 [ 2056.717049] device_initialize+0x1a1/0x440 [ 2056.717071] hci_init_sysfs+0x7c/0xa0 [ 2056.717088] hci_alloc_dev+0x1672/0x1d00 [ 2056.717116] __vhci_create_device+0x101/0x5a0 [ 2056.717134] vhci_write+0x2d0/0x470 [ 2056.725764] __vfs_write+0x613/0x8e0 [ 2056.725784] ? kernel_read+0x120/0x120 [ 2056.725800] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2056.725832] ? rw_verify_area+0x118/0x360 [ 2056.733572] vfs_write+0x20c/0x580 [ 2056.733594] ksys_write+0xea/0x1f0 [ 2056.733612] ? __ia32_sys_read+0xb0/0xb0 [ 2056.733632] ? do_syscall_64+0x26/0x610 [ 2056.733650] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2056.733667] ? do_syscall_64+0x26/0x610 [ 2056.750218] __x64_sys_write+0x73/0xb0 [ 2056.750239] do_syscall_64+0x103/0x610 [ 2056.750263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2056.750278] RIP: 0033:0x457f29 [ 2056.761474] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2056.761483] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2056.761502] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2056.774681] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 05:06:49 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, 0x0, 0x223) 05:06:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1900000000000000, 0x0}}, 0x20) 05:06:50 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xffffca88, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2056.774697] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2056.774706] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 2056.774719] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:06:50 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(0xffffffffffffffff, 0x0, 0x223) 05:06:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x5000000000000000, 0x0}}, 0x20) 05:06:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xa40f000000000000, 0x0}}, 0x20) [ 2058.589846] IPVS: ftp: loaded support on port[0] = 21 [ 2058.653374] chnl_net:caif_netlink_parms(): no params data found [ 2058.679859] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.686453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.693365] device bridge_slave_0 entered promiscuous mode [ 2058.700311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.706811] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.713937] device bridge_slave_1 entered promiscuous mode [ 2058.730613] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2058.739914] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2058.757097] team0: Port device team_slave_0 added [ 2058.763012] team0: Port device team_slave_1 added [ 2058.816130] device hsr_slave_0 entered promiscuous mode [ 2058.853964] device hsr_slave_1 entered promiscuous mode [ 2058.902475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.908865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.915534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.921878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2058.954366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2058.966185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2058.973277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.981012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.989213] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2059.000084] 8021q: adding VLAN 0 to HW filter on device team0 [ 2059.010865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2059.018573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.024935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2059.037110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2059.044763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2059.051111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2059.066576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2059.074590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2059.086665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2059.098005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2059.109341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2059.119825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2059.127551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2059.143103] 8021q: adding VLAN 0 to HW filter on device batadv0 05:06:52 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x1) 05:06:52 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xffffdd86, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:00 executing program 4 (fault-call:1 fault-nth:31): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:07:00 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:07:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0xffffffff00000000, 0x0}}, 0x20) 05:07:00 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffff000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:00 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x1) 05:07:00 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200c00, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0x76, @empty, 0x100000000}, {0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x9, [0x1f, 0x8, 0x10001, 0x3ff, 0x4, 0xfffffffffffffff8, 0x9, 0x18aa]}, 0x5c) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) 05:07:00 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:07:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) [ 2067.818180] FAULT_INJECTION: forcing a failure. [ 2067.818180] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.858635] CPU: 1 PID: 7951 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2067.865517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.874870] Call Trace: [ 2067.877472] dump_stack+0x172/0x1f0 [ 2067.881125] should_fail.cold+0xa/0x15 [ 2067.885033] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2067.890157] ? ___might_sleep+0x163/0x280 [ 2067.894328] __should_failslab+0x121/0x190 [ 2067.898599] should_failslab+0x9/0x14 [ 2067.898617] kmem_cache_alloc+0x2b2/0x6f0 [ 2067.898635] ? lock_downgrade+0x880/0x880 [ 2067.898657] __kernfs_new_node+0xef/0x690 [ 2067.898677] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2067.898696] ? wait_for_completion+0x440/0x440 [ 2067.898721] ? mutex_unlock+0xd/0x10 [ 2067.898735] ? kernfs_activate+0x192/0x1f0 [ 2067.898753] kernfs_new_node+0x99/0x130 [ 2067.898773] __kernfs_create_file+0x51/0x340 [ 2067.898794] sysfs_add_file_mode_ns+0x222/0x560 [ 2067.898819] sysfs_merge_group+0x1a0/0x340 [ 2067.898838] ? sysfs_mount+0x1e0/0x1e0 [ 2067.898854] ? kernfs_put+0x3e3/0x600 [ 2067.957239] dpm_sysfs_add+0x21d/0x270 [ 2067.957256] device_add+0xa20/0x18a0 [ 2067.964869] ? get_device_parent.isra.0+0x570/0x570 [ 2067.964885] ? start_creating+0x163/0x1e0 [ 2067.964902] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2067.964923] hci_register_dev+0x2e8/0x860 [ 2067.964953] __vhci_create_device+0x2d0/0x5a0 [ 2067.964983] vhci_write+0x2d0/0x470 [ 2067.965003] __vfs_write+0x613/0x8e0 [ 2067.965022] ? kernel_read+0x120/0x120 [ 2067.965036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2067.965067] ? rw_verify_area+0x118/0x360 [ 2067.965086] vfs_write+0x20c/0x580 [ 2067.965143] ksys_write+0xea/0x1f0 [ 2068.016350] ? __ia32_sys_read+0xb0/0xb0 [ 2068.016370] ? do_syscall_64+0x26/0x610 [ 2068.024476] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2068.029846] ? do_syscall_64+0x26/0x610 [ 2068.033834] __x64_sys_write+0x73/0xb0 [ 2068.037904] do_syscall_64+0x103/0x610 [ 2068.041805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2068.046999] RIP: 0033:0x457f29 [ 2068.050196] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2068.069095] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2068.069110] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2068.069119] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2068.069127] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2068.069135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 05:07:01 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0ffffffffffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:01 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x3}}, 0x20) 05:07:01 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x200000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2068.069144] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 2068.169706] Bluetooth: Can't register HCI device 05:07:01 executing program 4 (fault-call:1 fault-nth:32): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:07:01 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:07:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x19}}, 0x20) 05:07:01 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2068.393313] FAULT_INJECTION: forcing a failure. [ 2068.393313] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.432155] CPU: 1 PID: 8009 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2068.439034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.448384] Call Trace: [ 2068.448411] dump_stack+0x172/0x1f0 [ 2068.448438] should_fail.cold+0xa/0x15 [ 2068.448462] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2068.448485] ? ___might_sleep+0x163/0x280 [ 2068.448507] __should_failslab+0x121/0x190 [ 2068.448529] should_failslab+0x9/0x14 [ 2068.448547] kmem_cache_alloc+0x2b2/0x6f0 [ 2068.448576] ? lock_downgrade+0x880/0x880 [ 2068.448601] __kernfs_new_node+0xef/0x690 [ 2068.448621] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2068.458695] ? wait_for_completion+0x440/0x440 [ 2068.458722] ? mutex_unlock+0xd/0x10 [ 2068.458738] ? kernfs_activate+0x192/0x1f0 [ 2068.458756] kernfs_new_node+0x99/0x130 [ 2068.509623] __kernfs_create_file+0x51/0x340 [ 2068.514050] sysfs_add_file_mode_ns+0x222/0x560 [ 2068.518732] sysfs_merge_group+0x1a0/0x340 [ 2068.522974] ? sysfs_mount+0x1e0/0x1e0 [ 2068.526862] ? kernfs_put+0x3e3/0x600 [ 2068.530664] dpm_sysfs_add+0x21d/0x270 [ 2068.534757] device_add+0xa20/0x18a0 [ 2068.538459] ? get_device_parent.isra.0+0x570/0x570 [ 2068.543459] ? start_creating+0x163/0x1e0 [ 2068.547604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2068.553144] hci_register_dev+0x2e8/0x860 [ 2068.557287] __vhci_create_device+0x2d0/0x5a0 [ 2068.561768] vhci_write+0x2d0/0x470 [ 2068.565399] __vfs_write+0x613/0x8e0 [ 2068.569122] ? kernel_read+0x120/0x120 [ 2068.573004] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2068.578539] ? rw_verify_area+0x118/0x360 [ 2068.582679] vfs_write+0x20c/0x580 [ 2068.586221] ksys_write+0xea/0x1f0 [ 2068.589771] ? __ia32_sys_read+0xb0/0xb0 [ 2068.593831] ? do_syscall_64+0x26/0x610 [ 2068.597795] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2068.603143] ? do_syscall_64+0x26/0x610 [ 2068.607116] __x64_sys_write+0x73/0xb0 [ 2068.611004] do_syscall_64+0x103/0x610 [ 2068.614887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2068.620088] RIP: 0033:0x457f29 [ 2068.623269] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2068.642153] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2068.649851] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2068.657113] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2068.664376] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2068.671638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 2068.678900] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 2068.688183] Bluetooth: Can't register HCI device 05:07:01 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x1) 05:07:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x50}}, 0x20) 05:07:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:07:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:11 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, "11c3ee9b82717a10cd17eac3a38462bf57596c"}, 0x0) r1 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='wlan0trustedem0\'\x00', 0x0) keyctl$get_keyring_id(0x0, r1, 0x6) read(r0, 0x0, 0x0) 05:07:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x80020003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 05:07:11 executing program 4 (fault-call:1 fault-nth:33): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:07:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x300}}, 0x20) [ 2078.018715] FAULT_INJECTION: forcing a failure. [ 2078.018715] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.079790] CPU: 0 PID: 8030 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2078.086678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.096033] Call Trace: [ 2078.098640] dump_stack+0x172/0x1f0 [ 2078.102284] should_fail.cold+0xa/0x15 [ 2078.106191] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2078.111309] ? ___might_sleep+0x163/0x280 [ 2078.115471] __should_failslab+0x121/0x190 [ 2078.119715] should_failslab+0x9/0x14 [ 2078.123524] kmem_cache_alloc+0x2b2/0x6f0 [ 2078.127680] ? lock_downgrade+0x880/0x880 [ 2078.131838] __kernfs_new_node+0xef/0x690 [ 2078.135998] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2078.140765] ? wait_for_completion+0x440/0x440 [ 2078.145359] ? mutex_unlock+0xd/0x10 [ 2078.149084] ? kernfs_activate+0x192/0x1f0 [ 2078.153335] kernfs_new_node+0x99/0x130 [ 2078.157327] __kernfs_create_file+0x51/0x340 [ 2078.161752] sysfs_add_file_mode_ns+0x222/0x560 [ 2078.166440] sysfs_merge_group+0x1a0/0x340 [ 2078.170690] ? sysfs_mount+0x1e0/0x1e0 [ 2078.174578] ? kernfs_put+0x3e3/0x600 [ 2078.178401] dpm_sysfs_add+0x21d/0x270 [ 2078.182295] device_add+0xa20/0x18a0 [ 2078.186021] ? get_device_parent.isra.0+0x570/0x570 [ 2078.191040] ? start_creating+0x163/0x1e0 [ 2078.195197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2078.200744] hci_register_dev+0x2e8/0x860 [ 2078.204908] __vhci_create_device+0x2d0/0x5a0 [ 2078.209413] vhci_write+0x2d0/0x470 [ 2078.213053] __vfs_write+0x613/0x8e0 [ 2078.216781] ? kernel_read+0x120/0x120 [ 2078.220677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2078.226237] ? rw_verify_area+0x118/0x360 [ 2078.230392] vfs_write+0x20c/0x580 [ 2078.233942] ksys_write+0xea/0x1f0 [ 2078.237507] ? __ia32_sys_read+0xb0/0xb0 [ 2078.241580] ? do_syscall_64+0x26/0x610 [ 2078.245567] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2078.250943] ? do_syscall_64+0x26/0x610 [ 2078.250981] __x64_sys_write+0x73/0xb0 [ 2078.251000] do_syscall_64+0x103/0x610 [ 2078.251022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2078.251037] RIP: 0033:0x457f29 [ 2078.258899] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2078.258909] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2078.258924] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2078.258934] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2078.258943] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2078.258952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 05:07:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 05:07:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:11 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) read(r0, 0x0, 0x0) [ 2078.258975] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 05:07:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x200000000) 05:07:11 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x20002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0xfffffffffffffffb) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xe0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0xf00ffff, 0x0, 0x7, [0x3f00], 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1000, 0x802, 0x2, 0x3}) read(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x7) ioctl(r0, 0x7fffffff, &(0x7f00000000c0)="ba2b3c69e37ef3b0f4f4b45ea1ced98c2c10df95aa66c6b729026d8671cf4860e469eee617580506131445c6e46a89fd8dd419846f3b8f1b7be460c50a97c3e532844e1b061046d7c34db074d3fe1dda3fea1b0617a83d2738fb0e51e266e0ac3b4978dada520beb5a9d99969f192c1b036fa728ea533ba0ad") 05:07:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2078.479608] Bluetooth: Can't register HCI device [ 2078.529526] audit: type=1400 audit(1552021631.687:99): avc: denied { map } for pid=8063 comm="syz-executor.1" path="socket:[89196]" dev="sockfs" ino=89196 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 05:07:11 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x806000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:07:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) 05:07:11 executing program 4 (fault-call:1 fault-nth:34): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:07:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xfa4}}, 0x20) [ 2078.879545] FAULT_INJECTION: forcing a failure. [ 2078.879545] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.910747] CPU: 1 PID: 8087 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2078.917609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.926971] Call Trace: 05:07:12 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2078.929585] dump_stack+0x172/0x1f0 [ 2078.933235] should_fail.cold+0xa/0x15 [ 2078.937135] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2078.942255] ? ___might_sleep+0x163/0x280 [ 2078.946413] __should_failslab+0x121/0x190 [ 2078.950658] should_failslab+0x9/0x14 [ 2078.954850] kmem_cache_alloc+0x2b2/0x6f0 [ 2078.959012] ? lock_downgrade+0x880/0x880 [ 2078.963170] __kernfs_new_node+0xef/0x690 [ 2078.967326] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2078.972092] ? wait_for_completion+0x440/0x440 [ 2078.976692] ? mutex_unlock+0xd/0x10 [ 2078.980416] ? kernfs_activate+0x192/0x1f0 [ 2078.984659] kernfs_new_node+0x99/0x130 [ 2078.988646] __kernfs_create_file+0x51/0x340 [ 2078.988668] sysfs_add_file_mode_ns+0x222/0x560 [ 2078.988692] sysfs_merge_group+0x1a0/0x340 [ 2078.997852] ? sysfs_mount+0x1e0/0x1e0 [ 2078.997866] ? kernfs_put+0x3e3/0x600 [ 2078.997896] dpm_sysfs_add+0x21d/0x270 [ 2078.997912] device_add+0xa20/0x18a0 [ 2078.997933] ? get_device_parent.isra.0+0x570/0x570 [ 2078.997949] ? start_creating+0x163/0x1e0 05:07:12 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2079.026553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2079.032113] hci_register_dev+0x2e8/0x860 [ 2079.036281] __vhci_create_device+0x2d0/0x5a0 [ 2079.040790] vhci_write+0x2d0/0x470 [ 2079.044433] __vfs_write+0x613/0x8e0 [ 2079.048162] ? kernel_read+0x120/0x120 [ 2079.052064] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2079.057625] ? rw_verify_area+0x118/0x360 [ 2079.061787] vfs_write+0x20c/0x580 [ 2079.065340] ksys_write+0xea/0x1f0 [ 2079.068890] ? __ia32_sys_read+0xb0/0xb0 [ 2079.072974] ? do_syscall_64+0x26/0x610 [ 2079.076953] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2079.076978] ? do_syscall_64+0x26/0x610 [ 2079.077000] __x64_sys_write+0x73/0xb0 [ 2079.077016] do_syscall_64+0x103/0x610 [ 2079.094101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2079.099300] RIP: 0033:0x457f29 [ 2079.102501] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2079.121491] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:07:12 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) 05:07:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RWALK(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="a4"], 0x1) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000200)='./bus\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f0000000140)={0x7}, 0xfdef) [ 2079.129203] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2079.136474] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2079.144074] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2079.151344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 2079.151354] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 2079.354338] Bluetooth: Can't register HCI device [ 2080.116761] device bridge_slave_1 left promiscuous mode [ 2080.122933] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.168975] device bridge_slave_0 left promiscuous mode [ 2080.174542] bridge0: port 1(bridge_slave_0) entered disabled state [ 2081.896634] device hsr_slave_1 left promiscuous mode [ 2081.939032] device hsr_slave_0 left promiscuous mode [ 2082.001018] team0 (unregistering): Port device team_slave_1 removed [ 2082.012234] team0 (unregistering): Port device team_slave_0 removed [ 2082.023848] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2082.059891] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2082.130650] bond0 (unregistering): Released all slaves 05:07:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:07:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x1900}}, 0x20) 05:07:22 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) 05:07:22 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2000) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040), 0x4) 05:07:22 executing program 4 (fault-call:1 fault-nth:35): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:07:22 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(0xffffffffffffffff, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x223) [ 2088.885838] FAULT_INJECTION: forcing a failure. [ 2088.885838] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.903822] CPU: 1 PID: 8126 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2088.910676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2088.920040] Call Trace: [ 2088.922647] dump_stack+0x172/0x1f0 [ 2088.926304] should_fail.cold+0xa/0x15 [ 2088.930210] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2088.935329] ? ___might_sleep+0x163/0x280 [ 2088.939491] __should_failslab+0x121/0x190 [ 2088.943743] should_failslab+0x9/0x14 [ 2088.947551] kmem_cache_alloc+0x2b2/0x6f0 [ 2088.951743] ? lock_downgrade+0x880/0x880 [ 2088.951765] __kernfs_new_node+0xef/0x690 [ 2088.960055] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2088.964824] ? wait_for_completion+0x440/0x440 [ 2088.969421] ? mutex_unlock+0xd/0x10 [ 2088.973142] ? kernfs_activate+0x192/0x1f0 [ 2088.977421] kernfs_new_node+0x99/0x130 [ 2088.981407] __kernfs_create_file+0x51/0x340 [ 2088.985824] sysfs_add_file_mode_ns+0x222/0x560 [ 2088.990510] sysfs_merge_group+0x1a0/0x340 [ 2088.995186] ? sysfs_mount+0x1e0/0x1e0 [ 2088.999633] ? kernfs_put+0x3e3/0x600 [ 2089.003775] dpm_sysfs_add+0x21d/0x270 [ 2089.008032] device_add+0xa20/0x18a0 [ 2089.012728] ? get_device_parent.isra.0+0x570/0x570 [ 2089.018366] ? start_creating+0x163/0x1e0 [ 2089.023053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2089.029619] hci_register_dev+0x2e8/0x860 05:07:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) 05:07:22 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) read(r0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 05:07:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1400000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2089.034093] __vhci_create_device+0x2d0/0x5a0 [ 2089.039397] vhci_write+0x2d0/0x470 [ 2089.043044] __vfs_write+0x613/0x8e0 [ 2089.046770] ? kernel_read+0x120/0x120 [ 2089.050668] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2089.056235] ? rw_verify_area+0x118/0x360 [ 2089.060394] vfs_write+0x20c/0x580 [ 2089.063943] ksys_write+0xea/0x1f0 [ 2089.067501] ? __ia32_sys_read+0xb0/0xb0 [ 2089.071585] ? do_syscall_64+0x26/0x610 [ 2089.075577] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2089.080947] ? do_syscall_64+0x26/0x610 05:07:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x5000}}, 0x20) [ 2089.084937] __x64_sys_write+0x73/0xb0 [ 2089.084955] do_syscall_64+0x103/0x610 [ 2089.084986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2089.084999] RIP: 0033:0x457f29 [ 2089.085017] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2089.098161] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2089.098176] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 05:07:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x200000141042, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write(r1, &(0x7f00000012c0)='(', 0x1) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) 05:07:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2089.098185] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2089.098194] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2089.098204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 2089.098213] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 2089.208639] Bluetooth: Can't register HCI device 05:07:22 executing program 4 (fault-call:1 fault-nth:36): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 05:07:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xa40f}}, 0x20) 05:07:22 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2089.408445] ================================================================== [ 2089.415861] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 2089.422985] Read of size 8 at addr ffff888091a97398 by task syz-executor.4/8173 [ 2089.430431] [ 2089.432070] CPU: 1 PID: 8173 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 2089.438911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2089.448260] Call Trace: [ 2089.450856] dump_stack+0x172/0x1f0 05:07:22 executing program 1: clock_gettime(0x0, &(0x7f0000000140)={0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000200)={r0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 2089.454489] ? lockdep_register_key+0x3b9/0x490 [ 2089.459168] print_address_description.cold+0x7c/0x20d [ 2089.464451] ? lockdep_register_key+0x3b9/0x490 [ 2089.469127] ? lockdep_register_key+0x3b9/0x490 [ 2089.473803] kasan_report.cold+0x1b/0x40 [ 2089.477869] ? lockdep_register_key+0x3b9/0x490 [ 2089.482544] __asan_report_load8_noabort+0x14/0x20 [ 2089.487485] lockdep_register_key+0x3b9/0x490 [ 2089.492001] alloc_workqueue+0x427/0xe70 [ 2089.496074] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2089.501095] ? __init_waitqueue_head+0x36/0x90 [ 2089.505685] hci_register_dev+0x1b8/0x860 [ 2089.510448] ? hci_init_sysfs+0x7c/0xa0 [ 2089.514437] __vhci_create_device+0x2d0/0x5a0 [ 2089.518936] vhci_write+0x2d0/0x470 [ 2089.522596] __vfs_write+0x613/0x8e0 [ 2089.526321] ? kernel_read+0x120/0x120 [ 2089.530221] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2089.535774] ? rw_verify_area+0x118/0x360 [ 2089.539928] vfs_write+0x20c/0x580 [ 2089.543469] ksys_write+0xea/0x1f0 [ 2089.547010] ? __ia32_sys_read+0xb0/0xb0 [ 2089.551076] ? do_syscall_64+0x26/0x610 [ 2089.555061] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2089.560427] ? do_syscall_64+0x26/0x610 [ 2089.564407] __x64_sys_write+0x73/0xb0 [ 2089.568288] do_syscall_64+0x103/0x610 [ 2089.572166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2089.577336] RIP: 0033:0x457f29 [ 2089.580512] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2089.599407] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2089.607119] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2089.614398] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2089.621663] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2089.628923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 2089.636179] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 2089.643883] [ 2089.645508] Allocated by task 6312: [ 2089.649129] save_stack+0x45/0xd0 [ 2089.652571] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2089.657485] kasan_kmalloc+0x9/0x10 [ 2089.661093] __kmalloc+0x15c/0x740 [ 2089.664632] alloc_workqueue+0x13c/0xe70 [ 2089.668686] hci_register_dev+0x1b8/0x860 [ 2089.672815] __vhci_create_device+0x2d0/0x5a0 [ 2089.677292] vhci_write+0x2d0/0x470 [ 2089.680908] __vfs_write+0x613/0x8e0 [ 2089.684622] vfs_write+0x20c/0x580 [ 2089.688202] ksys_write+0xea/0x1f0 [ 2089.691725] __x64_sys_write+0x73/0xb0 [ 2089.695605] do_syscall_64+0x103/0x610 [ 2089.699485] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2089.704652] [ 2089.706272] Freed by task 6312: [ 2089.709544] save_stack+0x45/0xd0 [ 2089.712985] __kasan_slab_free+0x102/0x150 [ 2089.717216] kasan_slab_free+0xe/0x10 [ 2089.721005] kfree+0xcf/0x230 [ 2089.724110] alloc_workqueue+0xc3e/0xe70 [ 2089.728163] hci_register_dev+0x1b8/0x860 [ 2089.732302] __vhci_create_device+0x2d0/0x5a0 [ 2089.736799] vhci_write+0x2d0/0x470 [ 2089.740412] __vfs_write+0x613/0x8e0 [ 2089.744115] vfs_write+0x20c/0x580 [ 2089.747643] ksys_write+0xea/0x1f0 [ 2089.751164] __x64_sys_write+0x73/0xb0 [ 2089.755044] do_syscall_64+0x103/0x610 [ 2089.758926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2089.764094] [ 2089.765718] The buggy address belongs to the object at ffff888091a97280 [ 2089.765718] which belongs to the cache kmalloc-512 of size 512 [ 2089.778452] The buggy address is located 280 bytes inside of [ 2089.778452] 512-byte region [ffff888091a97280, ffff888091a97480) [ 2089.790299] The buggy address belongs to the page: [ 2089.795220] page:ffffea000246a5c0 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 2089.803351] flags: 0x1fffc0000000200(slab) [ 2089.807573] raw: 01fffc0000000200 ffffea000168d788 ffffea00023b9f08 ffff88812c3f0940 [ 2089.815445] raw: 0000000000000000 ffff888091a97000 0000000100000006 0000000000000000 [ 2089.823311] page dumped because: kasan: bad access detected [ 2089.828998] [ 2089.830615] Memory state around the buggy address: [ 2089.835541] ffff888091a97280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.842903] ffff888091a97300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.850254] >ffff888091a97380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.857594] ^ [ 2089.861719] ffff888091a97400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.869076] ffff888091a97480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2089.876421] ================================================================== [ 2089.883775] Disabling lock debugging due to kernel taint [ 2089.889226] Kernel panic - not syncing: panic_on_warn set ... [ 2089.895095] CPU: 1 PID: 8173 Comm: syz-executor.4 Tainted: G B 5.0.0+ #11 [ 2089.903300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2089.912632] Call Trace: [ 2089.915207] dump_stack+0x172/0x1f0 [ 2089.918914] panic+0x2cb/0x65c [ 2089.922093] ? __warn_printk+0xf3/0xf3 [ 2089.926001] ? lock_downgrade+0x880/0x880 [ 2089.930142] ? lockdep_register_key+0x3b9/0x490 [ 2089.934808] ? trace_hardirqs_off+0x62/0x220 [ 2089.939223] ? trace_hardirqs_off+0x59/0x220 [ 2089.943634] ? lockdep_register_key+0x3b9/0x490 [ 2089.948299] end_report+0x47/0x4f [ 2089.951735] ? lockdep_register_key+0x3b9/0x490 [ 2089.956388] kasan_report.cold+0xe/0x40 [ 2089.960343] ? lockdep_register_key+0x3b9/0x490 [ 2089.965005] __asan_report_load8_noabort+0x14/0x20 [ 2089.969927] lockdep_register_key+0x3b9/0x490 [ 2089.974420] alloc_workqueue+0x427/0xe70 [ 2089.978475] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2089.983475] ? __init_waitqueue_head+0x36/0x90 [ 2089.988041] hci_register_dev+0x1b8/0x860 [ 2089.992169] ? hci_init_sysfs+0x7c/0xa0 [ 2089.996152] __vhci_create_device+0x2d0/0x5a0 [ 2090.000631] vhci_write+0x2d0/0x470 [ 2090.004257] __vfs_write+0x613/0x8e0 [ 2090.007987] ? kernel_read+0x120/0x120 [ 2090.011860] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2090.017380] ? rw_verify_area+0x118/0x360 [ 2090.021511] vfs_write+0x20c/0x580 [ 2090.025049] ksys_write+0xea/0x1f0 [ 2090.028589] ? __ia32_sys_read+0xb0/0xb0 [ 2090.032636] ? do_syscall_64+0x26/0x610 [ 2090.036608] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2090.041955] ? do_syscall_64+0x26/0x610 [ 2090.045921] __x64_sys_write+0x73/0xb0 [ 2090.049794] do_syscall_64+0x103/0x610 [ 2090.053682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2090.058861] RIP: 0033:0x457f29 [ 2090.062081] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2090.080973] RSP: 002b:00007faec9a9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2090.088664] RAX: ffffffffffffffda RBX: 00007faec9a9fc90 RCX: 0000000000457f29 [ 2090.095916] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2090.103166] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2090.110417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faec9aa06d4 [ 2090.117666] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 2090.125702] Kernel Offset: disabled [ 2090.129318] Rebooting in 86400 seconds..