Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. 2020/08/31 10:19:29 fuzzer started 2020/08/31 10:19:29 dialing manager at 10.128.0.26:42877 2020/08/31 10:19:29 syscalls: 3155 2020/08/31 10:19:29 code coverage: enabled 2020/08/31 10:19:29 comparison tracing: enabled 2020/08/31 10:19:29 extra coverage: enabled 2020/08/31 10:19:29 setuid sandbox: enabled 2020/08/31 10:19:29 namespace sandbox: enabled 2020/08/31 10:19:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/31 10:19:29 fault injection: enabled 2020/08/31 10:19:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/31 10:19:29 net packet injection: enabled 2020/08/31 10:19:29 net device setup: enabled 2020/08/31 10:19:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/31 10:19:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/31 10:19:29 USB emulation: enabled 2020/08/31 10:19:29 hci packet injection: enabled 10:21:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 10:21:30 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c1c4e422e0000000000000000ff"], &(0x7f0000000080)=0x98) 10:21:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000001240)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="1c0000008400000004"], 0x4c}, 0x0) 10:21:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1200, &(0x7f0000000000), &(0x7f0000000380)=0x8) 10:21:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 10:21:31 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000000040)=0x25929d9b33959a14) syzkaller login: [ 180.820200][ T6856] IPVS: ftp: loaded support on port[0] = 21 [ 181.035836][ T6938] IPVS: ftp: loaded support on port[0] = 21 [ 181.045014][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 181.218075][ T7001] IPVS: ftp: loaded support on port[0] = 21 [ 181.279993][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.288487][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.298224][ T6856] device bridge_slave_0 entered promiscuous mode [ 181.329297][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.337780][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.346129][ T6856] device bridge_slave_1 entered promiscuous mode [ 181.443702][ T7063] IPVS: ftp: loaded support on port[0] = 21 [ 181.515482][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.595950][ T7118] IPVS: ftp: loaded support on port[0] = 21 [ 181.664913][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.772168][ T7193] IPVS: ftp: loaded support on port[0] = 21 [ 181.824867][ T6938] chnl_net:caif_netlink_parms(): no params data found [ 181.905726][ T6856] team0: Port device team_slave_0 added [ 181.956705][ T6856] team0: Port device team_slave_1 added [ 181.975132][ T7001] chnl_net:caif_netlink_parms(): no params data found [ 182.044520][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.051610][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.080010][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.098167][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.105240][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.131747][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.226188][ T6856] device hsr_slave_0 entered promiscuous mode [ 182.233166][ T6856] device hsr_slave_1 entered promiscuous mode [ 182.348300][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.357193][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.367830][ T6938] device bridge_slave_0 entered promiscuous mode [ 182.418462][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.427115][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.435765][ T6938] device bridge_slave_1 entered promiscuous mode [ 182.473731][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.480816][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.491844][ T7001] device bridge_slave_0 entered promiscuous mode [ 182.526387][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 182.575582][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.582790][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.591128][ T7001] device bridge_slave_1 entered promiscuous mode [ 182.659981][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.677773][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.690203][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.705521][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 182.715059][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 182.743937][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.811711][ T7001] team0: Port device team_slave_0 added [ 182.817712][ T2463] Bluetooth: hci0: command 0x0409 tx timeout [ 182.858585][ T7001] team0: Port device team_slave_1 added [ 182.868746][ T6938] team0: Port device team_slave_0 added [ 182.899443][ T6938] team0: Port device team_slave_1 added [ 183.015991][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.023259][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.051255][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.052850][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 183.065982][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.075500][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.102090][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.113867][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.120818][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.147339][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.169591][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.178050][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.189455][ T7193] device bridge_slave_0 entered promiscuous mode [ 183.198420][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.206301][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 183.222834][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.230591][ T7118] device bridge_slave_0 entered promiscuous mode [ 183.250714][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.260595][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.287752][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.299730][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.311306][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.319704][ T7193] device bridge_slave_1 entered promiscuous mode [ 183.330959][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.338086][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.347500][ T7118] device bridge_slave_1 entered promiscuous mode [ 183.377896][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.385933][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.395520][ T7063] device bridge_slave_0 entered promiscuous mode [ 183.432995][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.440090][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.451986][ T2647] Bluetooth: hci3: command 0x0409 tx timeout [ 183.454246][ T7063] device bridge_slave_1 entered promiscuous mode [ 183.527049][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.544672][ T6938] device hsr_slave_0 entered promiscuous mode [ 183.551337][ T6938] device hsr_slave_1 entered promiscuous mode [ 183.559205][ T6938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.567921][ T6938] Cannot create hsr debugfs directory [ 183.590350][ T7001] device hsr_slave_0 entered promiscuous mode [ 183.598160][ T7001] device hsr_slave_1 entered promiscuous mode [ 183.602574][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 183.612240][ T7001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.619941][ T7001] Cannot create hsr debugfs directory [ 183.628395][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.640046][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.656682][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.668478][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.701290][ T6856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.729586][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.759520][ T7118] team0: Port device team_slave_0 added [ 183.765446][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 183.780909][ T7118] team0: Port device team_slave_1 added [ 183.791207][ T6856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.805662][ T6856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.853480][ T7193] team0: Port device team_slave_0 added [ 183.860052][ T6856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.911118][ T7193] team0: Port device team_slave_1 added [ 183.928025][ T7063] team0: Port device team_slave_0 added [ 183.939193][ T7063] team0: Port device team_slave_1 added [ 183.975281][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.982271][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.010510][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.030534][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.038136][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.065266][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.090273][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.098296][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.128282][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.166350][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.173371][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.199350][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.212564][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.219511][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.250261][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.274853][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.281805][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.308946][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.350896][ T7118] device hsr_slave_0 entered promiscuous mode [ 184.359366][ T7118] device hsr_slave_1 entered promiscuous mode [ 184.366490][ T7118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.374743][ T7118] Cannot create hsr debugfs directory [ 184.465131][ T7063] device hsr_slave_0 entered promiscuous mode [ 184.473837][ T7063] device hsr_slave_1 entered promiscuous mode [ 184.480322][ T7063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.488266][ T7063] Cannot create hsr debugfs directory [ 184.536056][ T7193] device hsr_slave_0 entered promiscuous mode [ 184.545351][ T7193] device hsr_slave_1 entered promiscuous mode [ 184.554459][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.563192][ T7193] Cannot create hsr debugfs directory [ 184.762765][ T6938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.816771][ T6938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.860795][ T6938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.882726][ T2463] Bluetooth: hci0: command 0x041b tx timeout [ 184.927645][ T7001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.946720][ T7001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.975994][ T7001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.985469][ T6938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.023049][ T7001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.122836][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 185.177869][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.190117][ T7063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.205401][ T7063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.225364][ T7063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.238844][ T7063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.283229][ T2463] Bluetooth: hci2: command 0x041b tx timeout [ 185.298009][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.307140][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.346201][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.382755][ T7118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.435696][ T7118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.449715][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.460011][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.469033][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.476313][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.514980][ T7118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.523817][ T8140] Bluetooth: hci3: command 0x041b tx timeout [ 185.533244][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.541307][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.551513][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.560500][ T2625] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.567672][ T2625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.596590][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.603736][ T7193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.618550][ T7118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.653100][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.661943][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.676835][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.685855][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.699307][ T2625] Bluetooth: hci4: command 0x041b tx timeout [ 185.707794][ T7193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.725455][ T7193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.751814][ T6938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.767765][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.778127][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.787643][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.798254][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.809426][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.821445][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.830046][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.842708][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 185.847803][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.858370][ T7193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.904050][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.913228][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.921555][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.934244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.943181][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.950245][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.958401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.967781][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.976562][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.983691][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.991945][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.047542][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.056233][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.069007][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.078216][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.088641][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.097554][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.106808][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.133856][ T6938] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.149099][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.168448][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.181477][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.190832][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.204114][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.229843][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.260472][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.269303][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.302650][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.310568][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.323974][ T7001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.365255][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.376036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.390046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.399081][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.406248][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.414744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.422225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.429897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.439043][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.447705][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.454863][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.468422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.529635][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.539143][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.548964][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.556081][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.565080][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.573893][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.582187][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.589285][ T2463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.597088][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.605952][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.614847][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.622233][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.629777][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.669144][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.677286][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.690974][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.701172][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.710814][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.731132][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.755598][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.764158][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.773651][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.782285][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.794790][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.806178][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.815578][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.825204][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.839090][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.855425][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.882174][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.932296][ T6938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.962678][ T8146] Bluetooth: hci0: command 0x040f tx timeout [ 186.979188][ T6938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.996051][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.005631][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.015837][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.025190][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.034967][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.044808][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.054561][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.063562][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.071860][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.080954][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.090077][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.099502][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.145811][ T7063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.164900][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.178022][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.186252][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.194632][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.203868][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.212227][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.219372][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.227535][ T2463] Bluetooth: hci1: command 0x040f tx timeout [ 187.235829][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.268440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.277651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.287412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.296387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.306157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.314953][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.321979][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.331334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.339901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.362858][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.362953][ T2463] Bluetooth: hci2: command 0x040f tx timeout [ 187.371616][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.388702][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.410553][ T7001] device veth0_vlan entered promiscuous mode [ 187.466113][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.479479][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.488747][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.495889][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.504971][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.514544][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.523816][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.532088][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.539253][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.546978][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.556163][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.564927][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.592301][ T6938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.602037][ T7001] device veth1_vlan entered promiscuous mode [ 187.610262][ T2463] Bluetooth: hci3: command 0x040f tx timeout [ 187.632744][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.640594][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.654028][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.661472][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.674477][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.681860][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.690390][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.699722][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.708652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.720068][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.754997][ T6856] device veth0_vlan entered promiscuous mode [ 187.773111][ T2463] Bluetooth: hci4: command 0x040f tx timeout [ 187.783023][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.792125][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.807858][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.818115][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.829567][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.840189][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.856143][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.865081][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.873859][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.881741][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.890179][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.925057][ T8146] Bluetooth: hci5: command 0x040f tx timeout [ 187.935484][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.948571][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.959450][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.968818][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.977772][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.986464][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.995508][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.004737][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.018528][ T7118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.072842][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.081595][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.091479][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.099687][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.114312][ T6856] device veth1_vlan entered promiscuous mode [ 188.136998][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.145615][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.159498][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.169164][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.178488][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.192968][ T7001] device veth0_macvtap entered promiscuous mode [ 188.203521][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.254126][ T7001] device veth1_macvtap entered promiscuous mode [ 188.318347][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.329319][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.338844][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.347291][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.355961][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.363995][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.372881][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.381531][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.390481][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.412106][ T6856] device veth0_macvtap entered promiscuous mode [ 188.421216][ T6938] device veth0_vlan entered promiscuous mode [ 188.438476][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.447400][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.456024][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.464909][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.473730][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.482050][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.491929][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.501842][ T7063] device veth0_vlan entered promiscuous mode [ 188.514136][ T6856] device veth1_macvtap entered promiscuous mode [ 188.534744][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.548534][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.556970][ T6938] device veth1_vlan entered promiscuous mode [ 188.565819][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.578609][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.586900][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.599360][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.607347][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.619884][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.641899][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.669792][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.680411][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.694058][ T7063] device veth1_vlan entered promiscuous mode [ 188.710296][ T7001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.719647][ T7001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.730690][ T7001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.740648][ T7001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.773862][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.784395][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.797232][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.825001][ T7193] device veth0_vlan entered promiscuous mode [ 188.839525][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.848130][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.858706][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.867371][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.876408][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.885383][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.906456][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.917741][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.929719][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.942105][ T6856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.951526][ T6856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.960826][ T6856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.971927][ T6856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.998799][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.006777][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.016274][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.025577][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.050956][ T2463] Bluetooth: hci0: command 0x0419 tx timeout [ 189.083359][ T7193] device veth1_vlan entered promiscuous mode [ 189.160560][ T7118] device veth0_vlan entered promiscuous mode [ 189.185855][ T6938] device veth0_macvtap entered promiscuous mode [ 189.206228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.223125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.231288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.244847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.254509][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.263819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.279599][ T7063] device veth0_macvtap entered promiscuous mode 10:21:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) [ 189.317420][ T6938] device veth1_macvtap entered promiscuous mode [ 189.328197][ T2463] Bluetooth: hci1: command 0x0419 tx timeout [ 189.353770][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.362004][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.384087][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.392037][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.401382][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.410948][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.422358][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.447845][ T7063] device veth1_macvtap entered promiscuous mode [ 189.459290][ T2463] Bluetooth: hci2: command 0x0419 tx timeout [ 189.482563][ T7118] device veth1_vlan entered promiscuous mode 10:21:40 executing program 2: [ 189.527359][ T7193] device veth0_macvtap entered promiscuous mode [ 189.550502][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.565341][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 10:21:40 executing program 0: [ 189.587459][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.627079][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 10:21:40 executing program 2: 10:21:40 executing program 0: [ 189.685082][ T7193] device veth1_macvtap entered promiscuous mode [ 189.698256][ T8146] Bluetooth: hci3: command 0x0419 tx timeout [ 189.712083][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 10:21:40 executing program 2: [ 189.752431][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.762266][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.792986][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:21:40 executing program 0: [ 189.834071][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.845909][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.856719][ T8146] Bluetooth: hci4: command 0x0419 tx timeout [ 189.884963][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.962897][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.982688][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.002726][ T8146] Bluetooth: hci5: command 0x0419 tx timeout [ 190.003694][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.021013][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.054427][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.063332][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.071623][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.090433][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.109169][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.119183][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.144020][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.163331][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.177677][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.190152][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.206856][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.218156][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.230594][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.241351][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.261252][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.272178][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.283540][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.299907][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.311297][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.328772][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.356956][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.365700][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.376962][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.385981][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.405482][ T6938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.416422][ T6938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.425538][ T6938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.438796][ T6938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.457332][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.468566][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.478814][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.490124][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.500001][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.510527][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.520425][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.531129][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.544084][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.555684][ T7063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.573595][ T7063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.582307][ T7063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.591137][ T7063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.614320][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.626479][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.635569][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.645568][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.656283][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.670504][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.680750][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.691215][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.701485][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.711980][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.721877][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.734191][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.746357][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.774022][ T7118] device veth0_macvtap entered promiscuous mode [ 190.793570][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.801783][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.811371][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.824704][ T7193] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.833658][ T7193] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.842360][ T7193] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.851125][ T7193] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.883740][ T7118] device veth1_macvtap entered promiscuous mode [ 190.994429][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.009977][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.022343][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.033854][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.055393][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.076113][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.100818][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.137419][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.159232][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.178924][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.215669][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.243807][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.252042][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.273272][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.314433][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.332457][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.342290][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:21:42 executing program 1: 10:21:42 executing program 2: 10:21:42 executing program 0: [ 191.361841][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.373553][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.402559][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.420358][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.433957][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.466471][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.505831][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.534272][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.541665][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.566777][ T2463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.607215][ T7118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.626944][ T7118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.636077][ T7118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.645185][ T7118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 10:21:42 executing program 4: 10:21:42 executing program 3: 10:21:42 executing program 0: 10:21:42 executing program 2: 10:21:42 executing program 1: 10:21:42 executing program 5: 10:21:42 executing program 3: 10:21:42 executing program 2: 10:21:42 executing program 0: 10:21:42 executing program 5: 10:21:42 executing program 1: 10:21:42 executing program 4: 10:21:43 executing program 2: 10:21:43 executing program 3: 10:21:43 executing program 1: 10:21:43 executing program 5: 10:21:43 executing program 0: 10:21:43 executing program 4: 10:21:43 executing program 1: 10:21:43 executing program 2: 10:21:43 executing program 3: 10:21:43 executing program 5: 10:21:43 executing program 0: 10:21:43 executing program 4: 10:21:43 executing program 1: 10:21:43 executing program 3: 10:21:43 executing program 2: 10:21:43 executing program 5: 10:21:43 executing program 0: 10:21:43 executing program 4: 10:21:43 executing program 1: 10:21:43 executing program 3: 10:21:43 executing program 5: 10:21:43 executing program 2: 10:21:43 executing program 4: 10:21:43 executing program 0: 10:21:43 executing program 1: 10:21:43 executing program 3: 10:21:43 executing program 4: 10:21:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c157fd1772fee6968503bfc80bab590a0edafdb3c12e239f5e52a332202582e", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:21:43 executing program 2: 10:21:43 executing program 0: 10:21:43 executing program 1: 10:21:43 executing program 3: 10:21:43 executing program 4: 10:21:43 executing program 5: 10:21:43 executing program 2: [ 193.135063][ T8251] ptrace attach of "/root/syz-executor.5"[8249] was attempted by "/root/syz-executor.5"[8251] 10:21:44 executing program 0: 10:21:44 executing program 1: 10:21:44 executing program 5: 10:21:44 executing program 3: 10:21:44 executing program 4: 10:21:44 executing program 0: 10:21:44 executing program 2: 10:21:44 executing program 5: 10:21:44 executing program 1: 10:21:44 executing program 3: 10:21:44 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 10:21:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x8, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:44 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 10:21:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x40406301, 0x0, 0x0, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:44 executing program 3: 10:21:44 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x82082) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 10:21:44 executing program 4: r0 = socket(0x29, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c500a2, r2}) 10:21:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x8, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:44 executing program 1: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:44 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00']}}}], 0x28}, 0x0) [ 193.793371][ T8284] binder: 8282:8284 ioctl c0306201 20000000 returned -14 10:21:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd1, &(0x7f0000000300)="c4fe910c6786ce22000000000000000300dd444e0735e43eb95f6a78e0f25bef50631648b17d02e74cc426446e11176aba0617b927c9589bcca272096d523173440f1ab57b7d5ad152631946fe5a6bbb00549ec19c02f49d6959fdb80300000000000000f1346d8384e900f9af861e417b825ba527e009be6fd7c33dc3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:21:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[]) 10:21:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000038000380080001000000000008000300000000000600040000080000140002"], 0x4c}}, 0x0) 10:21:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x40046307, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:44 executing program 5: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x5}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x0, 0x20}, 0xc) 10:21:44 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x8000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) 10:21:44 executing program 2: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="140002006c6f00000000000000000000000000002800018008", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0xe00}}) 10:21:45 executing program 0: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r4, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 194.402754][ T8324] syz-executor.0 (8324) used greatest stack depth: 23248 bytes left 10:21:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gre0\x00'}, 0x18) 10:21:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000000480)={0x2c, r1, 0x101, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 10:21:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000000480)={0x2c, r1, 0x101, 0x0, 0x0, {0x15}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 10:21:45 executing program 5: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="140002006c6f00000000000000000000000000002800018008", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0x2, {0x3, 0xfffe, 0x7}}) [ 194.751089][ T8371] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 10:21:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000000480)={0x2c, r1, 0x101, 0x0, 0x0, {0x15}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 10:21:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gre0\x00'}, 0x18) 10:21:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e5f701", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2]}, @mcast2={0xff, 0x3}}}}}}}, 0x0) [ 194.825336][ T8379] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 10:21:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0x3}}) 10:21:45 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c31fe, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0xfdef) 10:21:45 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00']}}}], 0x28}, 0x0) 10:21:45 executing program 0: close(0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) acct(&(0x7f0000000040)='./file0\x00') 10:21:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 10:21:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x40405515, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 10:21:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000014001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 10:21:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f0000000180)=0x10) 10:21:46 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x8, @raw_data="aba808738e88b93c9ee789f01561b7b3bef74cd1feef56aa758c5e883ed6eee5936c31f6479a05f33cda07cf6678ac54aeee822a0f1d0b5da9baddb2bac7f0941e085b15b88a4fc32f04f585806880d4da92dec4905e615b5e248e54878e9ae77b7b027812edab1bf156d4934daedd2448036a38a5515746fed9e90d0779128163689ec9981dcfca4694162904a8a17b48090d38abd159f175339aef459e3dae55d731281f667fc2a3d961b792f7c36751c8ccbcc53b9c2c9b4560956b529a9f6923fbfd56bc8112"}}) 10:21:46 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00']}}}], 0x28}, 0x0) 10:21:46 executing program 5: 10:21:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x3, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0xffffffffffffff7e, 0x4000, 0x0}) 10:21:46 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c31fe, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0xfdef) 10:21:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630e, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) [ 195.501325][ T8426] binder: 8421:8426 unknown command 0 [ 195.519885][ T8426] binder: 8421:8426 ioctl c0306201 20000000 returned -22 10:21:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x5, @raw_data="bda72286ade0d9a1ceb4277e0a8f3092f3732309ee161c7b5a756cecf6269060160fcffc2347cb01b0dc2fcba41e8c44d4dff32aed136f232443f911b7f811bdca8f97b2d2f449e6bd4c82a0f6fa923be68c3ed8661348b067a8560e3155873c1139289496e841312832b21ac63de3afd31d21d41ff76476a8d08d8a345c2f840dc286aa4248be7dc2976a02fead32eb7a5eaf4156fe0357d5efb2598cd56b5094383d53ce0655bb79c32fb1f4e9cbd8455a51bc637f69d3b83dcd2be32c369cd5d6167d1169cb96"}) 10:21:46 executing program 1: prctl$PR_GET_TID_ADDRESS(0x28, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000a8, 0xa, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x6ad8d000) 10:21:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x3, 0x2}}, 0x20) 10:21:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x18, &(0x7f0000000080)={r1}, 0x8) 10:21:47 executing program 5: mlockall(0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 10:21:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0x3}}) 10:21:47 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @private=0xa010102}}, 0x1c) 10:21:47 executing program 3: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="140002006c6f00000000000000000000000000002800018008", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001100290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="e2ffe8051fb62aff04"], 0x24}}, 0x0) 10:21:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0xa000000, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xce, &(0x7f0000000300)="c4fe910c6786ce22000000000000000300dd444e0735e43eb95f6a78e0f25bef50631648b17d02e74cc426446e11176aba0617b927c9589bcca272096d523173440f1ab57b7d5ad152631946fe5a6bbb00549ec19c02f49d6959fdb80300000000000000f1346d8384e900f9af861e417b825ba527e009be6fd7c33dc3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:21:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)}) 10:21:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x0, @local, 0x8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) 10:21:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1}, &(0x7f0000000300)=0x8) 10:21:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0xa000000, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000430000008400001a34c19f009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 10:21:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x130, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:21:47 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x26080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 10:21:47 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 10:21:47 executing program 3: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:21:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x139, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:21:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0x8, &(0x7f0000000100)) 10:21:47 executing program 1: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="140002006c6f00000000000000000000000000002800018008", @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:21:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xf8, 0x8103, 0xf8}, 0x40) 10:21:47 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "d0f744", 0x18, 0x3c, 0x0, @private1, @mcast2, {[@srh={0x0, 0x2}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 10:21:47 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x65}, {{0x0, 0x0, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002ec0)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000a8, 0x0, &(0x7f00000001c0)={0x77359400}) 10:21:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x11, &(0x7f0000000080)={r1}, 0x8) 10:21:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x136, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:21:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000000480)={0x2c, r1, 0x101, 0x0, 0x0, {0x19}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 10:21:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 10:21:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000018000021004c000100480001000700010078740000380002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10:21:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040020000000e2fe5a23"], 0x20}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:21:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000380)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@private2]}}}], 0x28}, 0x4000005) 10:21:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630f, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:48 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000180)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) open(0x0, 0x0, 0x108) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 10:21:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000424000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) 10:21:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x23, 0x6d, 0x20000000000001, 0x92, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 10:21:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x65}, {{0x0, 0x0, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002ec0)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000000a8, 0x0, &(0x7f00000001c0)={0x77359400}) 10:21:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[]) 10:21:48 executing program 1: execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:21:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227e, &(0x7f0000000180)) 10:21:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="84e00c00044df32ca4b673c25fb2f4808051ad287621ea6d05bea63f54f666036aa9d5b6", @ANYRES64, @ANYBLOB="2ad64e75dc862951c4dd74ea2f03b88e5cf1e8ed73a98c7a70be9bd8005bbc69a3d5a377db24a22c4cf63d40b5ce622ac68d4f92e441dd1ebf03d4ef13f853cb2c86118852bfbe3e07"], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[]) [ 198.336830][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:21:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) 10:21:49 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700), 0xfce3) 10:21:49 executing program 2: execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2283, &(0x7f0000000180)) 10:21:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) writev(r0, &(0x7f0000000040), 0x200000000000003d) 10:21:49 executing program 0: 10:21:49 executing program 5: 10:21:49 executing program 2: 10:21:49 executing program 4: 10:21:49 executing program 3: 10:21:49 executing program 1: 10:21:49 executing program 2: 10:21:49 executing program 5: 10:21:49 executing program 0: 10:21:49 executing program 3: 10:21:49 executing program 0: 10:21:50 executing program 5: 10:21:50 executing program 2: 10:21:50 executing program 4: 10:21:50 executing program 3: 10:21:50 executing program 1: 10:21:50 executing program 0: 10:21:50 executing program 4: 10:21:50 executing program 5: 10:21:50 executing program 2: 10:21:50 executing program 1: 10:21:50 executing program 0: 10:21:50 executing program 3: 10:21:50 executing program 5: 10:21:50 executing program 4: 10:21:50 executing program 2: 10:21:50 executing program 1: 10:21:50 executing program 0: 10:21:50 executing program 3: 10:21:50 executing program 2: 10:21:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) 10:21:50 executing program 5: 10:21:50 executing program 1: 10:21:50 executing program 0: 10:21:50 executing program 3: 10:21:50 executing program 2: 10:21:50 executing program 1: 10:21:50 executing program 5: 10:21:50 executing program 4: 10:21:50 executing program 0: 10:21:50 executing program 3: 10:21:50 executing program 5: 10:21:50 executing program 4: 10:21:50 executing program 2: 10:21:50 executing program 1: 10:21:51 executing program 3: 10:21:51 executing program 0: 10:21:51 executing program 4: 10:21:51 executing program 5: 10:21:51 executing program 2: 10:21:51 executing program 1: 10:21:51 executing program 0: 10:21:51 executing program 3: 10:21:51 executing program 4: 10:21:51 executing program 5: 10:21:51 executing program 1: 10:21:51 executing program 2: 10:21:51 executing program 3: 10:21:51 executing program 0: 10:21:51 executing program 4: 10:21:51 executing program 1: 10:21:51 executing program 5: 10:21:51 executing program 3: 10:21:51 executing program 2: 10:21:51 executing program 0: 10:21:51 executing program 4: 10:21:51 executing program 2: 10:21:51 executing program 1: 10:21:51 executing program 5: 10:21:51 executing program 3: 10:21:51 executing program 4: 10:21:51 executing program 0: 10:21:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x2, 0x3, 0x33) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) 10:21:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) gettid() 10:21:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0x4000}]) 10:21:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x7, 0xd2, 0x0, 0x2}, 0x10}}, 0x0) 10:21:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000805, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000003300)={0x4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7) 10:21:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) [ 201.218037][ C0] hrtimer: interrupt took 55019 ns 10:21:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000003300)={0x4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 201.248551][ T3509] ion_buffer_destroy: buffer still mapped in the kernel 10:21:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) gettid() 10:21:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 10:21:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 10:21:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 10:21:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 10:21:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) 10:21:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 10:21:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x2800, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x7, 0xd2, 0x9, 0x2}, 0x10}}, 0x0) 10:21:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:53 executing program 3: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) 10:21:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) dup3(r2, r3, 0x0) 10:21:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0x68}}, 0x0) 10:21:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) 10:21:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="b7", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) 10:21:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) dup3(r2, r3, 0x0) 10:21:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) 10:21:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000180)=0x3dc95bdca3f46f92) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28044}, 0x2000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:21:53 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) migrate_pages(0x0, 0xb2, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000280)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) 10:21:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)) dup3(r2, r3, 0x0) 10:21:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x2800, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x7, 0xd2, 0x9, 0x2}, 0x10}}, 0x0) 10:21:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40001) 10:21:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 203.515521][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.655865][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) dup3(r2, r3, 0x0) 10:21:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40001) 10:21:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) 10:21:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0xb8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 10:21:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x2800, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x7, 0xd2, 0x9, 0x2}, 0x10}}, 0x0) 10:21:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) dup3(r2, r3, 0x0) [ 204.120502][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/78) 10:21:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) dup3(r2, r3, 0x0) 10:21:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) 10:21:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x400000000001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x44012) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="27c4ed424cbc87c00d2bbb3b79ded1282eaa4e45c1fa85001e6b3546344a95", 0x1f}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0xc100) 10:21:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000dc0)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x4b) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 10:21:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 204.539899][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) 10:21:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) 10:21:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x18}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:21:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 10:21:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 205.014869][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.033669][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:21:55 executing program 3: 10:21:55 executing program 2: [ 205.096665][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:21:55 executing program 1: 10:21:56 executing program 4: 10:21:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffce9, 0x401, 0x7ff, 0xcd, 0xfff, 0x6}, &(0x7f0000000100)={0xeb, 0xfffffffffffffbff, 0xb0, 0x9, 0x1ff, 0xfffffffffffffffb, 0x0, 0x56}, &(0x7f0000000180)={0xfffffffffffffff8, 0xb1, 0x3ff, 0x7b0, 0x1f, 0x9, 0x3, 0x3}, &(0x7f0000000280)={r5, r6/1000+10000}) dup3(r2, r3, 0x0) 10:21:56 executing program 3: 10:21:56 executing program 2: 10:21:56 executing program 1: 10:21:56 executing program 4: 10:21:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:56 executing program 4: 10:21:56 executing program 3: 10:21:56 executing program 1: 10:21:56 executing program 2: 10:21:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:21:56 executing program 3: 10:21:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f00000001c0)) dup3(r2, r3, 0x0) 10:21:56 executing program 4: 10:21:56 executing program 2: 10:21:57 executing program 1: 10:21:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:21:57 executing program 4: 10:21:57 executing program 3: 10:21:57 executing program 2: 10:21:57 executing program 1: 10:21:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:21:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:57 executing program 4: 10:21:57 executing program 2: 10:21:57 executing program 3: 10:21:57 executing program 1: 10:21:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:21:57 executing program 4: 10:21:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:21:57 executing program 3: 10:21:57 executing program 2: 10:21:57 executing program 1: 10:21:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:57 executing program 3: 10:21:57 executing program 4: 10:21:57 executing program 2: 10:21:57 executing program 1: 10:21:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:21:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:57 executing program 4: 10:21:57 executing program 3: 10:21:57 executing program 2: 10:21:57 executing program 1: 10:21:57 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:21:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:57 executing program 3: 10:21:57 executing program 4: 10:21:58 executing program 2: 10:21:58 executing program 1: 10:21:58 executing program 3: 10:21:58 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:21:58 executing program 1: 10:21:58 executing program 2: 10:21:58 executing program 4: 10:21:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:58 executing program 3: 10:21:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c157fd1772fee6968503bfc80bab590a0edafdb3c12e239f5e52a332202582e1bad38", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:21:58 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:21:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20048fb5, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="ea", 0x1}], 0x1}}], 0x1, 0x0) 10:21:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGPHYS(r0, 0x5501, 0x0) 10:21:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x126, &(0x7f0000000300)="c4fe910c6786ce22000000000000000300dd444e0735e43eb95f6a78e0f25bef50631648b17d02e74cc426446e11176aba0617b927c9589bcca272096d523173440f1ab57b7d5ad152631946fe5a6bbb00549ec19c02f49d6959fdb80300000000000000f1346d8384e900f9af861e417b825ba527e009be6fd7c33dc3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a92bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c93"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:21:58 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:21:58 executing program 1: 10:21:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:21:58 executing program 3: [ 207.750164][ T9149] ptrace attach of "/root/syz-executor.1"[9147] was attempted by "/root/syz-executor.1"[9149] 10:21:58 executing program 2: 10:21:58 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:21:58 executing program 1: 10:21:58 executing program 3: 10:21:58 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x114, 0x2, 0x0, 0x0) 10:21:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) [ 208.212954][ T2625] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 208.616529][ T2625] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 208.782658][ T2625] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.791741][ T2625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.800827][ T2625] usb 5-1: Product: syz [ 208.805636][ T2625] usb 5-1: Manufacturer: syz [ 208.810251][ T2625] usb 5-1: SerialNumber: syz [ 208.820133][ T2625] usbip-host 5-1: 5-1 is not in match_busid table... skip! 10:22:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x301, 0x0) 10:22:01 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8930, &(0x7f0000001540)={'batadv0\x00'}) 10:22:01 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:01 executing program 3: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x19, 0x0, 0x0) 10:22:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0x800454d2, 0x0) [ 210.714883][ T2625] usb 5-1: USB disconnect, device number 2 10:22:01 executing program 3: add_key$keyring(&(0x7f0000001300)='keyring\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:22:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:01 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0x3, r0, 0x0) 10:22:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0xf) 10:22:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74000089"}, 0x0, 0x0, @fd}) 10:22:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x38, 0x0, 0x0) 10:22:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x2, 0x80}) 10:22:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:22:01 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x0, 0x0) read$midi(r0, &(0x7f00000001c0)=""/243, 0xf3) 10:22:01 executing program 3: r0 = socket(0x2, 0x3, 0xdc) ioctl$sock_SIOCADDRT(r0, 0x40047459, 0x0) 10:22:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0xd, 0x0, &(0x7f00000002c0)) 10:22:02 executing program 4: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000040)) 10:22:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:22:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$rfkill(r0, 0x0, 0x0) 10:22:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) 10:22:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 10:22:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:22:02 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1262, 0x0) 10:22:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)=0x8f00) 10:22:02 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x100004, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "dafcbfa6"}, 0x0, 0x0, @fd}) 10:22:02 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) [ 211.499684][ T9242] input: syz0 as /devices/virtual/input/input5 10:22:02 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:22:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x4, 0x0, &(0x7f0000000540)) 10:22:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$phonet(r0, 0x0, 0x0) 10:22:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp\x00') read$rfkill(r0, 0x0, 0x0) 10:22:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x80081272, &(0x7f00000001c0)={[0x0, 0x2]}) 10:22:02 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:02 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:22:02 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x7b, &(0x7f0000000200)={r1}, 0x10) 10:22:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x288000, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, 0x0) 10:22:02 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:02 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f000000fbc0)=0x84d, 0x4) 10:22:02 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@deltaction={0x28, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 10:22:02 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:22:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x23, 0x0, &(0x7f0000000540)) 10:22:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:02 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:02 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 10:22:03 executing program 1: r0 = socket(0x2a, 0x2, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 10:22:03 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:03 executing program 4: r0 = socket(0xa, 0x3, 0x6e) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 10:22:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) 10:22:03 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:03 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:03 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f00000003c0)=[{0x0}, {0x0, 0x60ffffffffff}, {&(0x7f00000002c0)=""/120, 0x93}], 0x3a, &(0x7f0000000640)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000080)}, {&(0x7f0000000340)=""/128, 0x71}, {&(0x7f00000005c0)=""/113, 0x74}], 0x6, 0x0) 10:22:03 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f00000012c0)) 10:22:03 executing program 3: bpf$BPF_GET_PROG_INFO(0x13, &(0x7f00000000c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 10:22:03 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:03 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:03 executing program 1: kexec_load(0x0, 0x8000000000001b8, &(0x7f0000001600)=[{&(0x7f0000000080)="a10e3eb05e84c61d7e0a02c6f230d95e33c6027141924af2fcf1aa90bedd3e1fe1fbaca2c73faeb985f2bc96954ef864ea6e8bd5629e3630a6c4a87787d079014203d5ea291a9ac520a29722e361aea6defaf8a8907551b12905d4bc4142545639d2e5e4df37cafc61bfb4aa0120b1c28a301b", 0x73, 0x1ff, 0x5}, {&(0x7f0000000100)="072d9f12aca3e2b63d658e18f54ca6e64077ea1727bb098ba76b7e94ef2dfa0867c5820fc87fc24ec17922a8b075c2afe6d87fe6377fcf78f1d230520474b12b07560c3ee120b3d3a510c25334d1999a7a0d58da5756a6a1cbf6abf88cd9937d716feea4f626bc25339ddaf7d61f18f99183318e85cb6dea005e71ae9de8ebdefb99a0c10fe8100b8d8c2134bff3c693ce71f2cc838d654b5e50122db0e38385e3ecbe82d80aa500e1236929ab0b964310aa7d0feb6fe524b6726fc9e32ecfd7755e96a8407c9041db4888f769f7549ee7fbbb9665f888a62337eb5762a586f132cc8628d8102a17072149f6c9962e498c0e0166be0894f2", 0xf8}, {&(0x7f0000000200)="ae97051bb75e153839d4ed26a03eeb0c606b2217bdad6f5544aab0a718875e5abbdfd4fef7c8c16926d0ef51dc8d27efefa22ea9c456701b45c13ce8b828a1c2a03dcbb9c93b10f3e8571302e1a11395133f7c3c4073c935af3d23dfc5ee0ee1bd7f0cca2cbe45dbdd9c72d711cc6d0593a1e32e845a92c1fe975915b093c1eed619e40ecf0f9ed941c5658cd87571b67651c480924ff49e40ddaac43b618f333bd012c9fc3c30cb", 0xa8, 0xfff, 0x5}, {&(0x7f00000002c0)="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", 0x1000, 0xe6, 0xb810}, {&(0x7f00000012c0)="628df943f606ad93a555d5c7f1e7a79a8230c94f17093376e84c4b2cfda9115a36915058627f2280c291c26ffbaa0a3b50c7ae49c723568acd88ef5e6901", 0x3e, 0x4, 0x7}, {&(0x7f0000001300)="cb7475aa77621888aecc7cdd97ca3f57910abc7bb1c0da928eeeef1535619d80856d164e50f627220181f0e1db0a07b4979fd82c71201834ed9695b95b349336263e548c12e2f7cf20a4bda20e50431da4a3be610d52ac0ee93f91d208475d4d5a4787c77e146c84847d908e2d54b04880ed32d6aa95863bb517a7c21096f5aabe0a33a8b6ab6c7beca57c1d2ea1a4421d5f9c4542a5c5ba884c236fd1d7895d208f903a3cf314307e9c46a065f29f6b235b19e01e9ba75d3f220df448a99d", 0xbf, 0x6, 0x3}, {&(0x7f0000001740)="a07d1aa8194f26ce4e51c770ba06c556dd3caf0b2e4de1459ff4eb4b9b3fbc8c9e0671f2f5010c956ccd830d333f5bb5cfb61d7e3e25f53a5e6fe5682f3a28a1da2e37710491cf5c9ea076ef8eefbec0f6457acb19983b56f079552f36d8d1cadaaba36bbf6291691d5399d6c8b24ada31cb160570869e1e99154a10ff70311b3efe2ceaef9ca86a891aea4be94d33be343ee6964bc4fded8dde742e5868ea26017d892e6c562cd63571a0955c35cdbd2a925743676fe8b070b761acf3ce20a6c8e187b5a9883f0aab5e6ccdba3e5a6269fe4eb389cae6bd1ecdb6d3a5b500", 0xdf, 0x1, 0x8}, {&(0x7f0000001400)="62b3aa3d08d7ca4ea7c2779ed45261be440b3601179b63d8e3971112f4ffc0ed7c1a14ef6e98", 0x26, 0x1, 0x4}, {&(0x7f0000001500)="4a228b5d477901a7f9f379777a0609568e68739202cdb8ad811021f07c32be63420e18bc9cc94b23c97a5538353c23fb7fc89424cbbd336c97e1dccb165a67964d86471071bfb80dd80078f1b365e367539a8bb065c828292c5ace242e50240064c75dd527906193a25522a1d3f876fc879bca18d1a0ebe3a09dae19aabb101e15017c03d3971aaf9bcc0825edddceb9693e9e4ec0e756d93c37df26b2f2c442258568c7b85eb7bd9f059d5ff7fe0fc0dce1d87ae0e064b65f23161aebcfc69496bd41639ddae21705c2da0d0462c18c18e1f8620fdd581e16f5bc7346a355ae2a32bfaa8c5b47df35efcb4e1cd24ef1", 0xf0, 0x6, 0xfff}], 0x280000) 10:22:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) 10:22:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:03 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247009, &(0x7f0000000000)) 10:22:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:03 executing program 1: r0 = socket(0x15, 0x5, 0x0) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10) 10:22:03 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x180, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 10:22:03 executing program 3: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=0xffffffffffffffff], &(0x7f0000000080)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x17, &(0x7f0000000200)={r1}, 0x10) 10:22:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:03 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 10:22:03 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8911, &(0x7f0000001540)={'batadv0\x00'}) 10:22:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:03 executing program 3: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x10) 10:22:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:03 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:04 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_TMR_START(r0, 0x5403) [ 213.232917][ T9391] ucma_write: process 148 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. 10:22:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x21, 0x0, &(0x7f0000000540)) 10:22:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000580)=[{{&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, 0x0}}, {{&(0x7f0000000080)=@rc, 0x80, 0x0}}], 0x2, 0x0) 10:22:04 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x17, 0x7f, 0x0, 0x5}, 0x40) 10:22:04 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5101, 0x0) 10:22:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:04 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:04 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') read$rfkill(r0, 0x0, 0x0) 10:22:04 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x1100, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 10:22:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:04 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8970, &(0x7f0000001540)={'batadv0\x00'}) 10:22:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100), 0x4) 10:22:04 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:04 executing program 1: r0 = socket(0xa, 0x3, 0x9) getsockopt$TIPC_IMPORTANCE(r0, 0x3a, 0x7f, 0x0, 0x0) 10:22:04 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:04 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000200)='./file\x00', 0x0, 0x0) 10:22:04 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 10:22:04 executing program 2: r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:04 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in6=@rand_addr=' \x01\x00'}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 10:22:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x84) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) 10:22:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x32, &(0x7f0000000000)="b391de2b", 0x4) 10:22:05 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 10:22:05 executing program 2: r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @in={0x2, 0x0, @multicast1}, @xdp, @phonet={0x2}}) 10:22:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x4b, 0x0, 0x0) 10:22:05 executing program 1: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x3c, 0x0, 0x300) 10:22:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:05 executing program 2: r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x8, 0x0, &(0x7f0000000540)) 10:22:05 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x3fffff) 10:22:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) 10:22:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:05 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000880)={'vcan0\x00', @ifru_addrs=@in={0x2, 0x0, @multicast2}}) 10:22:05 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 214.783101][ T9506] input: syz0 as /devices/virtual/input/input7 10:22:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) [ 214.887435][ T9515] input: syz0 as /devices/virtual/input/input8 10:22:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:05 executing program 4: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x14, 0x0, 0x300) 10:22:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) 10:22:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 10:22:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:05 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 10:22:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 3: clone(0xbe5a80, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f00006d2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 4: r0 = socket(0xa, 0x3, 0x7) setsockopt$inet6_group_source_req(r0, 0x29, 0x7, &(0x7f0000000140)={0x7, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) 10:22:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000007940)=[{{&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x8, 0x6, {0x42}}, 0x80, 0x0}}], 0x1, 0x0) 10:22:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x9c) 10:22:06 executing program 1: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890d, 0x0) 10:22:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5411, &(0x7f0000000000)) 10:22:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x48, 0x0, 0x0) 10:22:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x800, 0x0, "32b54be9fadffc20b236ffc2219643a49e1810e26ac5a384"}) 10:22:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003600)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4f23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x18}}], 0x2, 0x0) 10:22:06 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:06 executing program 4: bpf$MAP_LOOKUP_BATCH(0xa, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x38) 10:22:06 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') read$rfkill(r0, 0x0, 0x0) 10:22:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6}]}, 0x24}}, 0x0) 10:22:06 executing program 4: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x43, 0x0, 0x0) 10:22:06 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 1: r0 = socket(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x400c810, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 10:22:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:07 executing program 3: r0 = socket$inet(0x2, 0x80005, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 10:22:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 2: socketpair(0x1e, 0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x401870c8, 0x0) 10:22:07 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x89a3, &(0x7f0000001180)={'team_slave_0\x00'}) 10:22:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(r1, r2, 0x0) 10:22:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x107, 0x2, 0x0, 0x0) 10:22:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 2: socketpair(0x1e, 0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:07 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x2, &(0x7f0000000080)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 10:22:07 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 10:22:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:22:07 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) 10:22:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, &(0x7f0000000040)) 10:22:07 executing program 2: socketpair(0x1e, 0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f00000003c0)="1f97", 0xfffff, r0) 10:22:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x4c, 0x0, 0x0) 10:22:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 10:22:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:07 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xc008240a, 0x0) 10:22:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x100, 0x1efd6}) 10:22:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x40) 10:22:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:07 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 3: r0 = fsopen(&(0x7f0000000200)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10:22:08 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002600)='/dev/vcsa\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/3, 0x3) 10:22:08 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4e) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'macvlan1\x00', @ifru_flags=0x1000}) 10:22:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 3: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x200000c0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 10:22:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 10:22:08 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, 0x0, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 1: bpf$MAP_UPDATE_ELEM(0x7, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) 10:22:08 executing program 4: r0 = socket(0x29, 0x5, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 10:22:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, 0x0, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:08 executing program 3: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000040), 0x8) 10:22:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x400454ca, &(0x7f0000000380)) 10:22:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 4: r0 = socket(0x2, 0x6, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000), 0xa) 10:22:08 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, 0x0, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 10:22:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x4e) r2 = dup2(r1, r0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 10:22:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:08 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x401, 0x402) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000300), 0x35) read$rfkill(r0, &(0x7f0000000040), 0x8) 10:22:08 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @ipv4={[], [], @remote}}, 0x20) 10:22:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 1: socketpair(0x18, 0x0, 0x3, &(0x7f0000000100)) 10:22:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:08 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:22:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x82, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) 10:22:09 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x4001, 0x5}]}]}, 0x20}}, 0x0) 10:22:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000009380)=[{{&(0x7f0000000000)={0x1e, 0x300, @local}, 0x10, 0x0}}], 0x1, 0x0) 10:22:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040)) 10:22:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x84, 0x3, 0x0, 0x0) 10:22:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) 10:22:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x247, 0x0) read$usbfs(r0, 0x0, 0xf0ffffff7f0000) 10:22:09 executing program 3: r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x88, 0x2, 0x0, 0x0) 10:22:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x9c) 10:22:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$SIOCPNADDRESOURCE(r0, 0x8982, &(0x7f0000000100)) 10:22:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x80045113, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @generic}) 10:22:09 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x84, 0x6b, 0x0, 0x0) 10:22:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:09 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000001540)={'batadv0\x00'}) 10:22:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 3: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="9e811375c0db22414481b3116a5bf7cd97ea58160bc64c8d6e1cbbe5d9ae004eadf728b0e2d96296424b393f21d87164def64dbb1e7810ab98e6ed661b6a4098335c54017c108add850be42f74cb4aa3ce76defd79bf884bc69c3f036bd0d763ab"}, {&(0x7f0000000180)="a48ec5a41e8517211f7c8ddf9a53b3f33e933b69a86e1562546c97ebc1309e118edfc63858c73850a3b9a43c51f1e950e3d44b6322f984b5b9e67ba3eaab47b5752f22182b3f8518376bc6f9464c70655e32910dd6f1989d17d4c512a275ae5584698efd874c9e5ca89d9f8460fa6e9259a83963cccf3f6812c202b65b8df10544d21f8f0bb06d114798578b9ab13d2292e48bb46947536eae85ffb81153f26556c91f19699bede330b836"}, {&(0x7f0000000240)="6aeaa9596b43c05b3c2c899a9c0b002d93b3965e3c43eb1648552a7f52d8159e8f0fe859add1f64f66cf4b9a39348c18db5cbf0bc6ecc0a05e56ccc4c8564f32e22c91cd2416cdd37888955ab32bad9d5baf4c6b7d22cb12e3ef2e0de55ea3b5895dfbed63e4c29495ba274fe38b060a19dba306f3"}, {&(0x7f00000002c0)="6de91d411ed1f0c97d51bc189eaf266a34b1616fad550bf91b274083c95a4fa94bdac9902774cc3b489762e94f7e02e1450480319627f99e56946024a08b752a4e70630d4d8abfae5c07cece0ed7067f3e9ce50cab6f440ed36db880203b7a2b55c076c8c55f9d3014baddd02e97dd9017fea7c6b11e0f2d0def538b34db6f2a73a7b488ade7b43b59"}, {&(0x7f0000000380)="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"}, {&(0x7f0000000480)="6c22e5990acd07c78b7c7a9a505c6391dd260ff71f1d4c2de4d182d20d1386bcc1bfdb497804b31a6bf835412cc5300221cc3cc44907a39b5f4c7461413f0983697cc2a359e730dc2ce360f5a759ed1853bcad786ef2a934e61f99c85edc434d51fc73f7cfc5d5ac6e7d80992878a9b94ac5b1dde40387dd233bf1077130e5da4ec4e42f7af596cc2051cbcd40da5daf8442"}, {&(0x7f00000006c0)="2cc56ebc4e1cb4298310715cc7865dc2f733932f0331d7c019279943ff64ec9aa2d97fdac48fff9788d733e2d9890c510399d32ab46599163a9488349b1b1bb8d26774a9e3fbcce9d838af7c0384442dd1d4f0315103e054f67c55a03a0a5e33ec81d9aa9fcd6638ea527c4873397eea3a1c"}], 0x1000007b, 0x0) 10:22:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x700, 0x10, 0x0, 0x50, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x67, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0x0, [{@loopback, 0x6}, {@multicast1, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @generic={0x86, 0xa, "45b30e352891fe35"}]}}}}}) socketpair(0x8, 0x5, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8910, &(0x7f00000000c0)={'syz_tun\x00', @ifru_ivalue=0x80000000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', r2, 0x7, 0x1, 0x0, 0x380000, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast2, {[@generic={0x44, 0xc, "999f912e25c9451de05c"}, @ssrr={0x89, 0x2b, 0x12, [@empty, @private=0xa010100, @empty, @private=0xa010100, @private=0xa010101, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}, @lsrr={0x83, 0x7, 0x19, [@broadcast]}]}}}}}) 10:22:10 executing program 4: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x2b, 0x0, 0x0) 10:22:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x0) 10:22:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x4a, 0x0, 0x0) 10:22:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x21faa24deead5e1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0xffe3}}}, 0x24}}, 0x0) 10:22:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) dup3(r2, r3, 0x0) 10:22:10 executing program 3: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000180), 0x14) 10:22:10 executing program 1: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x48, 0x0, 0x300) 10:22:10 executing program 4: prctl$PR_SET_SECUREBITS(0x59616d61, 0xda) 10:22:10 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x80045105, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @generic}) 10:22:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) dup3(r2, r3, 0x0) 10:22:10 executing program 1: r0 = socket$kcm(0x2, 0x6, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8934, &(0x7f0000000680)={0x0, @l2tp={0x2, 0x0, @local}, @generic={0x0, "41090000002953f9460800a5e56d"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="54cbc062a86b"}}) 10:22:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x66010, r0, 0x0) 10:22:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:10 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 10:22:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) dup3(r2, r3, 0x0) 10:22:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x300, 0x0, 0x0) 10:22:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@can, 0x7, 0x0}, 0x0) 10:22:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 10:22:11 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0xa, 0x0, &(0x7f0000000540)) 10:22:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x11, 0x0, 0x0, 0x300) 10:22:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) dup3(r2, r3, 0x0) 10:22:11 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:11 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file\x00', 0x0) r1 = open$dir(&(0x7f0000001180)='./file\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./file\x00', 0x0) r2 = open$dir(&(0x7f0000000280)='./file\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001480)='./file\x00', r2, &(0x7f00000014c0)='./file0\x00', 0x5) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001040)='./file\x00', r3, &(0x7f0000001080)='./file\x00', 0x0) 10:22:11 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x26, 0x8000031, 0xffffffffffffffff, &(0x7f0000000000)='\x00') 10:22:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004680)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00'}) 10:22:11 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) dup3(r2, r3, 0x0) 10:22:11 executing program 4: r0 = socket(0x1e, 0x1, 0x0) getpeername$netlink(r0, 0x0, 0x0) 10:22:11 executing program 3: socket(0x2c, 0x3, 0x4) 10:22:11 executing program 1: mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x78259cc60964babf, 0xffffffffffffffff, 0x0) 10:22:11 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) dup3(r2, r3, 0x0) 10:22:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') read$rfkill(r0, 0x0, 0x0) 10:22:11 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f00000000c0)={'team0\x00', @ifru_settings={0x2, 0xffffffe0, @fr_pvc_info=0x0}}) 10:22:11 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000100)={'vcan0\x00', @ifru_ivalue}) 10:22:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:11 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 10:22:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r3, 0x0) 10:22:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0xa, @sdr}) 10:22:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r0, 0x0, 0x0) 10:22:12 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') read$rfkill(r0, 0x0, 0x0) 10:22:12 executing program 3: r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f00006d2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:12 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) dup3(r2, r3, 0x0) 10:22:12 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFCONF(r0, 0x80108906, 0x0) 10:22:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 10:22:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') read$rfkill(r0, 0x0, 0x0) 10:22:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r3, 0x0) 10:22:12 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) dup3(r2, r3, 0x0) 10:22:12 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 10:22:12 executing program 1: r0 = socket(0x2, 0x6, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x29, 0x0, 0x0) 10:22:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {}, 0x9}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) 10:22:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@sco={0x1f, @none}}) [ 222.288575][T10082] input: syz1 as /devices/virtual/input/input9 10:22:13 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) dup3(r2, r3, 0x0) 10:22:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f0000000000), 0x12) read$rfkill(r0, 0x0, 0x0) [ 222.349584][T10090] input: syz1 as /devices/virtual/input/input10 10:22:13 executing program 3: msgrcv(0x0, 0x0, 0x8, 0x0, 0x5800) 10:22:13 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 10:22:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r3, 0x0) 10:22:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000007940)=[{{&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x8, 0x0, {0x42}}, 0x80, 0x0}}], 0x1, 0x0) 10:22:13 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) dup3(r2, r3, 0x0) 10:22:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f00000002c0)) 10:22:14 executing program 3: r0 = socket(0xa, 0x3, 0x8) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, &(0x7f0000000100)=0x2) 10:22:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') read$rfkill(r0, 0x0, 0x0) 10:22:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) dup3(r2, r3, 0x0) 10:22:14 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="c83eeed4c1908ebb0d419b81749ad86d", 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:22:14 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) dup3(r2, r3, 0x0) 10:22:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') read$rfkill(r0, 0x0, 0x0) 10:22:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x1d, 0x0, &(0x7f0000000540)) 10:22:14 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:14 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000000)={'vcan0\x00', @ifru_addrs=@in={0x2, 0x0, @broadcast}}) 10:22:14 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x280400, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/dev/nbd#\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) 10:22:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r3, 0x0) 10:22:14 executing program 4: r0 = fsopen(&(0x7f0000000080)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\\\x00\x00', 0x0, 0x0) 10:22:15 executing program 3: r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000100)) 10:22:15 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:15 executing program 4: r0 = fsopen(&(0x7f0000000080)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\\\x00\x00', 0x0, 0x0) 10:22:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') read$rfkill(r0, 0x0, 0x0) 10:22:15 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x92000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 10:22:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x541b, 0x0) 10:22:15 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x21, 0x0, 0x0) 10:22:15 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8915, &(0x7f0000000000)) 10:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x3}]}]}, 0x20}}, 0x0) 10:22:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r3, 0x0) 10:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'bond0\x00', @ifru_map}) 10:22:15 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x800c5012, 0x0) [ 225.104987][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:15 executing program 3: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x0) read$qrtrtun(r0, &(0x7f0000000080)=""/110, 0xfffffffffffffef5) 10:22:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x18, 0x0, 0x0) [ 225.148216][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:22:16 executing program 1: r0 = socket(0x2, 0x3, 0x6e) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x19, 0x0, 0x300) 10:22:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x6b80}) 10:22:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f0000000780)={@val, @val, @eth={@dev, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, 'j\bX', 0xfbc, 0x2f, 0x0, @private0, @dev, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0], "51adb0d96f9faa6207216bcc29cf1c9d4edcf57b888832b492972d9062fc6d15d86c8280f53c7c28d5deec802ceef7fef382802b07c463f9d84fdc82239af96dd9a0db8a27ffbb055b72ee1e02e3a75c06db95379744ce3319b45d4c9d6e239173186fcadc4c535574c443f89e22af2dec6e033abab3f70af1514546748f3877e1d0e28622f73edb11f4187b1dceb22c97b773e6f7b01a5af45bd20a2e93d808eec86dbbb59f5f3abb0df8a617b9f7d074eaab7a037cbc1b2a41eba1dd763e98f8aa1fee46e879b50b27d8df9a046f8aa4dc7e849c8bdbb349be5e807d61f61d12"}, {}, {}, {0x8, 0x6558, 0x0, "cf9351efc801a5777fc9d4adebdcab7299b209ea3e87565a75b33d384d94773b331ad007b443bcbaf87c"}}}}}}}}, 0x1000) 10:22:16 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$set_timeout(0xb, r0, 0x0) 10:22:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) 10:22:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r3, 0x0) 10:22:16 executing program 1: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 10:22:16 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfff, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32e0d3a6"}, 0x0, 0x0, @fd}) 10:22:16 executing program 2: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x30, 0x0, 0x300) [ 226.062114][T10268] input: syz1 as /devices/virtual/input/input11 [ 226.099276][T10276] input: syz1 as /devices/virtual/input/input12 10:22:16 executing program 4: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x5529120ace000bfd, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x2000}, 0xffffff4d) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80201, 0x0) 10:22:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = dup2(r1, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x29, 0xb, 0x0, 0x0) 10:22:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x84, 0x25, 0x0, 0x0) 10:22:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x30, 0x0, &(0x7f0000000540)) 10:22:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x29, 0x10, 0x0, 0x0) 10:22:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 10:22:17 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x20000000) 10:22:17 executing program 4: r0 = socket(0x2, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x40000100) 10:22:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100), 0x4) 10:22:17 executing program 1: r0 = socket(0x2, 0x3, 0x6e) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xb, 0x0, 0x300) 10:22:17 executing program 3: r0 = socket(0xa, 0x3, 0x6b) setsockopt$inet_pktinfo(r0, 0x29, 0x19, 0x0, 0x300) 10:22:17 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10:22:17 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0x17}) 10:22:17 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 10:22:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 10:22:17 executing program 1: r0 = socket(0xa, 0x3, 0x7) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000280)={'team_slave_0\x00', @ifru_settings={0x0, 0x7, @te1=0x0}}) 10:22:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80, 0x0) ioctl$BLKTRACESETUP(r0, 0x40081271, &(0x7f00000001c0)={[0x0, 0x2]}) 10:22:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x8f, &(0x7f0000000200), &(0x7f00006d2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 10:22:18 executing program 0: 10:22:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:18 executing program 3: 10:22:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5509, 0x0) 10:22:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40045506, 0x0) 10:22:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:18 executing program 3: 10:22:18 executing program 3: 10:22:18 executing program 3: 10:22:18 executing program 3: 10:22:18 executing program 3: 10:22:19 executing program 3: 10:22:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) 10:22:19 executing program 3: 10:22:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:19 executing program 1: 10:22:19 executing program 0: 10:22:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:19 executing program 0: 10:22:19 executing program 3: 10:22:19 executing program 1: 10:22:19 executing program 0: 10:22:19 executing program 1: 10:22:19 executing program 3: 10:22:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:20 executing program 5: 10:22:20 executing program 1: 10:22:20 executing program 0: 10:22:20 executing program 3: 10:22:20 executing program 1: 10:22:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:20 executing program 0: 10:22:20 executing program 5: 10:22:20 executing program 3: 10:22:20 executing program 3: 10:22:20 executing program 5: 10:22:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:21 executing program 1: 10:22:21 executing program 0: 10:22:21 executing program 3: 10:22:21 executing program 5: 10:22:21 executing program 5: 10:22:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:21 executing program 0: 10:22:21 executing program 1: 10:22:21 executing program 3: 10:22:21 executing program 5: 10:22:21 executing program 5: 10:22:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:21 executing program 0: 10:22:21 executing program 3: 10:22:21 executing program 1: 10:22:21 executing program 5: 10:22:22 executing program 3: 10:22:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:22 executing program 5: 10:22:22 executing program 0: 10:22:22 executing program 1: 10:22:22 executing program 3: 10:22:22 executing program 3: 10:22:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:22 executing program 1: 10:22:22 executing program 5: 10:22:22 executing program 0: 10:22:22 executing program 3: 10:22:22 executing program 0: 10:22:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:23 executing program 3: 10:22:23 executing program 5: 10:22:23 executing program 1: 10:22:23 executing program 0: 10:22:23 executing program 1: 10:22:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:23 executing program 5: 10:22:23 executing program 3: 10:22:23 executing program 0: 10:22:23 executing program 1: 10:22:23 executing program 5: 10:22:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:24 executing program 3: 10:22:24 executing program 1: 10:22:24 executing program 0: 10:22:24 executing program 5: 10:22:24 executing program 3: 10:22:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:24 executing program 1: 10:22:24 executing program 5: 10:22:24 executing program 0: 10:22:24 executing program 3: 10:22:24 executing program 1: 10:22:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:24 executing program 3: 10:22:24 executing program 0: 10:22:24 executing program 5: 10:22:24 executing program 1: 10:22:24 executing program 0: 10:22:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:25 executing program 5: 10:22:25 executing program 1: 10:22:25 executing program 0: 10:22:25 executing program 3: 10:22:25 executing program 1: 10:22:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:25 executing program 5: 10:22:25 executing program 0: 10:22:25 executing program 3: 10:22:25 executing program 1: 10:22:25 executing program 3: 10:22:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:25 executing program 5: 10:22:25 executing program 0: 10:22:25 executing program 1: 10:22:25 executing program 3: 10:22:25 executing program 1: 10:22:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:26 executing program 5: 10:22:26 executing program 0: 10:22:26 executing program 3: 10:22:26 executing program 1: 10:22:26 executing program 5: 10:22:26 executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x550c, 0x0) 10:22:26 executing program 3: 10:22:26 executing program 1: 10:22:26 executing program 0: 10:22:26 executing program 5: 10:22:26 executing program 1: 10:22:26 executing program 4: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x83c0550b, 0x0) 10:22:26 executing program 5: 10:22:26 executing program 3: 10:22:26 executing program 0: 10:22:26 executing program 1: 10:22:27 executing program 5: 10:22:27 executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x550c, 0x0) 10:22:27 executing program 1: 10:22:27 executing program 0: 10:22:27 executing program 3: 10:22:27 executing program 5: 10:22:27 executing program 5: 10:22:27 executing program 4: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x83c0550b, 0x0) 10:22:27 executing program 0: 10:22:27 executing program 1: 10:22:27 executing program 3: 10:22:27 executing program 5: 10:22:27 executing program 5: 10:22:28 executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x550c, 0x0) 10:22:28 executing program 3: 10:22:28 executing program 1: 10:22:28 executing program 0: 10:22:28 executing program 5: 10:22:28 executing program 0: 10:22:28 executing program 4: syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x83c0550b, 0x0) 10:22:28 executing program 5: 10:22:28 executing program 1: 10:22:28 executing program 3: 10:22:28 executing program 0: 10:22:28 executing program 1: 10:22:29 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:29 executing program 5: 10:22:29 executing program 0: 10:22:29 executing program 3: 10:22:29 executing program 1: 10:22:29 executing program 5: 10:22:29 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:29 executing program 0: 10:22:29 executing program 1: 10:22:29 executing program 3: 10:22:29 executing program 5: 10:22:29 executing program 3: 10:22:29 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:29 executing program 1: 10:22:29 executing program 0: 10:22:29 executing program 5: 10:22:29 executing program 3: 10:22:30 executing program 3: 10:22:30 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:30 executing program 5: 10:22:30 executing program 0: 10:22:30 executing program 1: 10:22:30 executing program 3: 10:22:30 executing program 0: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000004600)=""/210, 0x1a, 0xd2, 0x8}, 0x20) 10:22:30 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:30 executing program 1: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 10:22:30 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) 10:22:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x2000000000000021, 0x2, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x7, 0x700, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000180)=0x3dc95bdca3f46f92) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28044}, 0x2000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:22:30 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x0, 0x2, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28044}, 0x2000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:22:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x2000000000000021, 0x2, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x0, 0x700}}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000180)=0x3dc95bdca3f46f92) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x2000) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:22:31 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:31 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) 10:22:31 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) [ 240.454162][T10781] hub 9-0:1.0: USB hub found [ 240.476573][T10781] hub 9-0:1.0: 8 ports detected 10:22:31 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) 10:22:31 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) [ 240.745778][T10796] hub 9-0:1.0: USB hub found [ 240.758153][T10796] hub 9-0:1.0: 8 ports detected [ 240.800763][T10798] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/5' not defined. 10:22:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x2000000000000021, 0x2, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x7, 0x700, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000180)=0x3dc95bdca3f46f92) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28044}, 0x2000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:22:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:31 executing program 0: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000004600)=""/210, 0x2e, 0xd2, 0x8}, 0x20) 10:22:31 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b903000600f4000040000000b738000000570035f4c38422a3bc8220000510"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:22:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 10:22:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 241.250165][T10811] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined. 10:22:32 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x2000000000000021, 0x0, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x7, 0x700}}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000180)=0x3dc95bdca3f46f92) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28044}, 0x2000) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 241.286426][ T28] audit: type=1800 audit(1598869352.047:2): pid=10817 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 10:22:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 10:22:32 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040020000000e2fe5a23000000", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 241.433029][ T28] audit: type=1800 audit(1598869352.197:3): pid=10832 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 10:22:32 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 10:22:32 executing program 0: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:22:32 executing program 0: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x154, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_TAIL={0x140, 0xf, "adb7a62e028e1198e4ccb15ce23f9b97febb0de0eceb06f7ef64edf365a61129b596380e224aecc2864b3308c0968f577b1c61662f10de99dad3f5666f960de997c444250ca8049669a8595450645a5af7e3114d46883df68fe0fd57b85840257a241c6b020e8162b56cc86107c68a20e1a662e60fe2fb07d100722f329450f05ed469ef91fc0dac622541301ff5921d5d7f37c84543f98661b8c3bb56f7747c0e120455e0968a1b516c5592bd561a491ba2849ca9eb999d0f54f53f762048662924a6af56e8ec2b7296389a13413dd1de2c94794c65e8d65fb7f883e6882c2b449252add231ceb03866675f2ab39fce39567489271aceb2ef67bc72170a93681797e0e3d065b405862300f99324894f2109b7e3d027ceb26e8d0ff4241d18d9b352b97ba599ec62251132f28450662b3ca2aad3cedbb87b55577ca2"}]}, 0x154}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:32 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x2000000000000021, 0x2, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x4a2, @ipv4={[], [], @local}, 0x7}, 0x1c) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x8}, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x7, 0x700, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000180)=0x3dc95bdca3f46f92) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28044}, 0x2000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:22:32 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:32 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x2, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x3a, 0x0, &(0x7f0000007cc0)) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={@private2={0xfc, 0x2, [], 0x1}, 0x5f, r3}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={0x0, @generic={0x2, "29176fcfb596ec8183d56b1f2c70"}, @xdp={0x2c, 0x9, 0x0, 0x35}, @hci={0x1f, 0x4, 0x4}, 0x3ff, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)='macsec0\x00', 0xfffffffffffffffe, 0x9, 0xfffd}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/7, 0x7}, {&(0x7f0000001940)=""/165, 0xa5}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5}, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003ac0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000003bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000040c0)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000004140)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, @xdp={0x2c, 0x2, 0x0, 0x20}, @in={0x2, 0x4e20, @loopback}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004100)='syzkaller0\x00', 0x4000000000000000, 0x8, 0x81}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000004200)={0x0, @xdp={0x2c, 0x2, 0x0, 0x3f}, @l2tp={0x2, 0x0, @multicast1, 0x4}, @generic={0xba28b2530a95e006, "6f92fc9c0afb668625c4a7050865"}, 0x3, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000041c0)='team0\x00', 0x6, 0xaf63, 0x20}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000047c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005140)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000005240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005ac0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000005bc0)=0xe8) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f0000005c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005c80)=""/75, 0x4b}, {&(0x7f0000005d00)=""/95, 0x5f}, {&(0x7f0000005d80)=""/246, 0xf6}], 0x3}, 0x20) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000006980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006940)={&(0x7f0000005f00)={0xa40, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xba1}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x7, 0xa9, 0xf0, 0x9}, {0x1, 0xcc, 0x0, 0x9}, {0x2, 0x70, 0x4, 0x4}, {0x2, 0x0, 0x3f, 0x3fe0000}, {0xfe, 0x81, 0x8, 0x7}, {0x68, 0x20, 0x7f}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x8, 0x81, 0x9, 0x10}, {0x3ff, 0x5, 0xc1, 0x8}, {0x9, 0x1d, 0x0, 0x3}, {0x5, 0x3, 0x7, 0x6}, {0x4, 0x6, 0x40, 0x9}, {0x5, 0x0, 0xdc, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x93a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}]}}, {{0x8, 0x1, r13}, {0x26c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4800000}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x31f7e3fd}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x8, 0xa, 0x6, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x865c}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x24000855}, 0x80) 10:22:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) [ 242.223699][T10866] hub 9-0:1.0: USB hub found [ 242.246652][T10866] hub 9-0:1.0: 8 ports detected 10:22:33 executing program 0: close(0xffffffffffffffff) unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x81402, 0x0) acct(&(0x7f0000000040)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc76051c5e9fdcf46}, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 10:22:33 executing program 1: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0x9}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000004600)=""/210, 0x18, 0xd2, 0x8}, 0x20) [ 242.420871][T10866] hub 9-0:1.0: USB hub found [ 242.427641][T10866] hub 9-0:1.0: 8 ports detected 10:22:33 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:33 executing program 0: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4}}) 10:22:33 executing program 1: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xd, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) 10:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002280)='/dev/rfkill\x00', 0x0, 0x0) readv(r2, &(0x7f0000003480)=[{0x0}, {&(0x7f0000002300)=""/151, 0x97}], 0x2) [ 242.672008][T10895] hub 9-0:1.0: USB hub found [ 242.697722][T10895] hub 9-0:1.0: 8 ports detected 10:22:33 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) [ 242.947411][T10914] hub 9-0:1.0: USB hub found [ 242.957628][T10914] hub 9-0:1.0: 8 ports detected 10:22:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8060000", @ANYRES16=r3, @ANYBLOB="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"], 0x6e8}}, 0x0) 10:22:33 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:33 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 243.149820][T10921] hub 9-0:1.0: USB hub found 10:22:33 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) [ 243.172988][T10921] hub 9-0:1.0: 8 ports detected 10:22:34 executing program 5: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ftruncate(r0, 0x0) 10:22:34 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:34 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 243.396536][T10942] hub 9-0:1.0: USB hub found 10:22:34 executing program 5: r0 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x560) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xffc1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="ac1457d5", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x83, &(0x7f000059aff8)={r6}, &(0x7f00000001c0)=0x8) [ 243.421615][T10942] hub 9-0:1.0: 8 ports detected 10:22:34 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:34 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000340)=""/224, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000540), 0x4) openat$vfio(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c01) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4008004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="ea99722798d434199f5902c9cd1a2ef3f80e48b858c690e9d8bc5061f2291250883a263a726fa06099da"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10:22:34 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x5cff, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, 0x0) [ 243.785658][T10965] hub 9-0:1.0: USB hub found 10:22:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 243.817323][T10965] hub 9-0:1.0: 8 ports detected 10:22:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) [ 244.003926][T10984] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 244.026715][T10976] ceph: No path or : separator in source 10:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000340)=""/224, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000540), 0x4) openat$vfio(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c01) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4008004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="ea99722798d434199f5902c9cd1a2ef3f80e48b858c690e9d8bc5061f2291250883a263a726fa06099da"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10:22:34 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) [ 244.092098][T10973] hub 9-0:1.0: USB hub found [ 244.098516][T10988] ceph: No path or : separator in source [ 244.105002][T10973] hub 9-0:1.0: 8 ports detected 10:22:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000340)=""/224, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000540), 0x4) openat$vfio(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c01) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4008004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="ea99722798d434199f5902c9cd1a2ef3f80e48b858c690e9d8bc5061f2291250883a263a726fa06099da"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10:22:35 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0x0, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x5cff, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) 10:22:35 executing program 5: [ 244.262923][T11003] ceph: No path or : separator in source [ 244.321248][T11006] hub 9-0:1.0: USB hub found 10:22:35 executing program 1: [ 244.366023][T11006] hub 9-0:1.0: 8 ports detected [ 244.375736][T11012] ceph: No path or : separator in source 10:22:35 executing program 5: 10:22:35 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) 10:22:35 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) acct(&(0x7f0000000040)='./file0\x00') [ 244.522424][ T2625] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 244.582378][ T8146] usb 3-1: new high-speed USB device number 2 using dummy_hcd 10:22:35 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x5cff, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) [ 244.801955][T11041] hub 9-0:1.0: USB hub found [ 244.814764][T11041] hub 9-0:1.0: 8 ports detected [ 244.827654][ T2625] usb 5-1: device descriptor read/64, error 18 [ 244.862618][ T8146] usb 3-1: device descriptor read/64, error 18 [ 245.262496][ T8146] usb 3-1: device descriptor read/64, error 18 [ 245.262505][ T2625] usb 5-1: device descriptor read/64, error 18 [ 245.532360][ T8146] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 245.562322][ T2625] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 245.802336][ T8146] usb 3-1: device descriptor read/64, error 18 [ 245.872525][ T2625] usb 5-1: device descriptor read/64, error 18 [ 246.192375][ T8146] usb 3-1: device descriptor read/64, error 18 [ 246.282334][ T2625] usb 5-1: device descriptor read/64, error 18 [ 246.312568][ T8146] usb usb3-port1: attempt power cycle [ 246.412444][ T2625] usb usb5-port1: attempt power cycle 10:22:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:37 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:37 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0x0, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x5cff, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) 10:22:37 executing program 5: 10:22:37 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x5cff, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) [ 247.042305][ T8146] usb 3-1: new high-speed USB device number 4 using dummy_hcd 10:22:37 executing program 5: 10:22:38 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x5cff, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x0, 0x3}) 10:22:38 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:38 executing program 5: 10:22:38 executing program 0: 10:22:38 executing program 5: [ 247.437005][T11091] hub 9-0:1.0: USB hub found [ 247.450609][T11091] hub 9-0:1.0: 8 ports detected [ 247.522358][ T8146] usb 3-1: device not accepting address 4, error -71 [ 247.562282][ T2625] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 247.742880][ T2625] usb 5-1: device descriptor read/8, error -61 [ 247.929760][ T8146] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.012614][ T2625] usb 5-1: device descriptor read/8, error -61 [ 248.112987][ T8146] usb 3-1: device descriptor read/8, error -61 [ 248.282334][ T2625] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 248.402794][ T8146] usb 3-1: device descriptor read/8, error -61 [ 248.462486][ T2625] usb 5-1: device descriptor read/8, error -61 [ 248.523341][ T8146] usb usb3-port1: unable to enumerate USB device [ 248.752642][ T2625] usb 5-1: device descriptor read/8, error -61 [ 248.877682][ T2625] usb usb5-port1: unable to enumerate USB device 10:22:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:40 executing program 0: 10:22:40 executing program 5: 10:22:40 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:40 executing program 1: 10:22:41 executing program 1: 10:22:41 executing program 0: 10:22:41 executing program 5: 10:22:41 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:41 executing program 0: 10:22:41 executing program 1: [ 250.578072][T11140] hub 9-0:1.0: USB hub found [ 250.583174][ T2625] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 250.599072][T11140] hub 9-0:1.0: 8 ports detected [ 250.792491][ T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 250.872279][ T2625] usb 5-1: device descriptor read/64, error 18 [ 251.062510][ T5] usb 3-1: device descriptor read/64, error 18 [ 251.282386][ T2625] usb 5-1: device descriptor read/64, error 18 [ 251.452319][ T5] usb 3-1: device descriptor read/64, error 18 [ 251.572331][ T2625] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.722287][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 251.872403][ T2625] usb 5-1: device descriptor read/64, error 18 [ 252.032274][ T5] usb 3-1: device descriptor read/64, error 18 [ 252.262315][ T2625] usb 5-1: device descriptor read/64, error 18 [ 252.383580][ T2625] usb usb5-port1: attempt power cycle [ 252.482376][ T5] usb 3-1: device descriptor read/64, error 18 [ 252.612421][ T5] usb usb3-port1: attempt power cycle [ 252.723911][ T0] NOHZ: local_softirq_pending 08 10:22:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 253.102372][ T2625] usb 5-1: new high-speed USB device number 9 using dummy_hcd 10:22:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:44 executing program 5: 10:22:44 executing program 1: 10:22:44 executing program 0: 10:22:44 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:44 executing program 5: 10:22:44 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 253.332485][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd 10:22:44 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 253.381813][T11171] hub 9-0:1.0: USB hub found [ 253.399861][T11171] hub 9-0:1.0: 8 ports detected 10:22:44 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:44 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 253.593093][ T2625] usb 5-1: device not accepting address 9, error -71 10:22:44 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 253.695846][T11191] hub 9-0:1.0: USB hub found [ 253.713618][T11191] hub 9-0:1.0: 8 ports detected 10:22:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 253.822511][ T5] usb 3-1: device not accepting address 8, error -71 10:22:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:44 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:44 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:44 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:44 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 254.238745][T11215] hub 9-0:1.0: USB hub found [ 254.279562][T11215] hub 9-0:1.0: 8 ports detected 10:22:45 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:45 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:45 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:45 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) [ 254.615251][T11244] hub 9-0:1.0: USB hub found 10:22:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 254.652456][T11244] hub 9-0:1.0: 8 ports detected 10:22:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:45 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:45 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:45 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 254.966840][T11268] hub 9-0:1.0: USB hub found [ 254.981086][T11268] hub 9-0:1.0: 8 ports detected 10:22:45 executing program 0 (fault-call:6 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:46 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:46 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:46 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) [ 255.349517][T11292] FAULT_INJECTION: forcing a failure. [ 255.349517][T11292] name failslab, interval 1, probability 0, space 0, times 1 [ 255.373516][T11293] hub 9-0:1.0: USB hub found [ 255.393231][T11293] hub 9-0:1.0: 8 ports detected [ 255.406193][T11292] CPU: 1 PID: 11292 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0 [ 255.414908][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.424955][T11292] Call Trace: [ 255.428249][T11292] dump_stack+0x198/0x1fd [ 255.432590][T11292] should_fail.cold+0x5/0x14 [ 255.437191][T11292] ? tomoyo_realpath_from_path+0xc3/0x620 [ 255.442915][T11292] should_failslab+0x5/0xf [ 255.447339][T11292] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 255.453418][T11292] __kmalloc+0x6f/0x310 [ 255.457620][T11292] tomoyo_realpath_from_path+0xc3/0x620 [ 255.463181][T11292] ? tomoyo_profile+0x42/0x50 [ 255.467866][T11292] tomoyo_path_number_perm+0x1cb/0x4d0 [ 255.473330][T11292] ? tomoyo_path_number_perm+0x183/0x4d0 [ 255.478991][T11292] ? tomoyo_execute_permission+0x470/0x470 [ 255.484809][T11292] ? find_held_lock+0x2d/0x110 [ 255.489615][T11292] ? ksys_write+0x212/0x250 [ 255.494259][T11292] ? __mutex_unlock_slowpath+0xe2/0x610 [ 255.499831][T11292] ? __fget_files+0x294/0x400 [ 255.504536][T11292] security_file_ioctl+0x50/0xb0 [ 255.509488][T11292] __do_compat_sys_ioctl+0x50/0x230 [ 255.514774][T11292] __do_fast_syscall_32+0x57/0x80 [ 255.519808][T11292] do_fast_syscall_32+0x2f/0x70 [ 255.524663][T11292] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 255.530989][T11292] RIP: 0023:0xf7f62549 [ 255.535062][T11292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 10:22:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x83c0550b, 0x0) [ 255.554671][T11292] RSP: 002b:00000000f555c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 255.563093][T11292] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040086200 [ 255.571076][T11292] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.579061][T11292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.587030][T11292] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 255.595002][T11292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:22:46 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:46 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:46 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) [ 255.799995][T11313] hub 9-0:1.0: USB hub found [ 255.808569][T11313] hub 9-0:1.0: 8 ports detected [ 255.915830][T11292] ERROR: Out of memory at tomoyo_realpath_from_path. 10:22:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x550c, 0x0) 10:22:46 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:46 executing program 0 (fault-call:6 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:46 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:46 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 256.158153][T11329] FAULT_INJECTION: forcing a failure. [ 256.158153][T11329] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 256.171392][T11329] CPU: 1 PID: 11329 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0 [ 256.180066][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.190127][T11329] Call Trace: [ 256.193432][T11329] dump_stack+0x198/0x1fd [ 256.197809][T11329] should_fail.cold+0x5/0x14 [ 256.202416][T11329] __alloc_pages_nodemask+0x183/0x790 [ 256.207806][T11329] ? __alloc_pages_slowpath.constprop.0+0x2830/0x2830 [ 256.208086][T11334] hub 9-0:1.0: USB hub found [ 256.214588][T11329] cache_grow_begin+0x71/0x4a0 [ 256.214629][T11329] cache_alloc_refill+0x27b/0x340 [ 256.214649][T11329] ? lockdep_hardirqs_off+0x96/0xd0 [ 256.214675][T11329] ? tomoyo_realpath_from_path+0xc3/0x620 [ 256.214687][T11329] __kmalloc+0x2f0/0x310 [ 256.214723][T11329] tomoyo_realpath_from_path+0xc3/0x620 [ 256.214743][T11329] ? tomoyo_profile+0x42/0x50 [ 256.214765][T11329] tomoyo_path_number_perm+0x1cb/0x4d0 [ 256.214788][T11329] ? tomoyo_path_number_perm+0x183/0x4d0 [ 256.247548][T11334] hub 9-0:1.0: 8 ports detected [ 256.249794][T11329] ? tomoyo_execute_permission+0x470/0x470 [ 256.249812][T11329] ? find_held_lock+0x2d/0x110 [ 256.249840][T11329] ? ksys_write+0x212/0x250 [ 256.249878][T11329] ? __mutex_unlock_slowpath+0xe2/0x610 [ 256.249904][T11329] ? __fget_files+0x294/0x400 [ 256.295715][T11329] security_file_ioctl+0x50/0xb0 [ 256.300664][T11329] __do_compat_sys_ioctl+0x50/0x230 [ 256.305873][T11329] __do_fast_syscall_32+0x57/0x80 [ 256.310905][T11329] do_fast_syscall_32+0x2f/0x70 [ 256.315767][T11329] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 256.322094][T11329] RIP: 0023:0xf7f62549 [ 256.326165][T11329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.345772][T11329] RSP: 002b:00000000f555c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 256.354187][T11329] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040086200 [ 256.362162][T11329] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.370139][T11329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.378110][T11329] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 256.386082][T11329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:22:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x83c0550b, 0x0) 10:22:47 executing program 0 (fault-call:6 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:47 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:47 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:47 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 256.681138][T11353] FAULT_INJECTION: forcing a failure. [ 256.681138][T11353] name failslab, interval 1, probability 0, space 0, times 0 [ 256.748978][T11353] CPU: 0 PID: 11353 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0 [ 256.757685][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.767758][T11353] Call Trace: [ 256.771060][T11353] dump_stack+0x198/0x1fd [ 256.775404][T11353] should_fail.cold+0x5/0x14 [ 256.780006][T11353] should_failslab+0x5/0xf [ 256.780391][T11358] hub 9-0:1.0: USB hub found [ 256.784423][T11353] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 256.784462][T11353] kmem_cache_alloc_node_trace+0x55/0x3f0 [ 256.784493][T11353] __get_vm_area_node+0x126/0x3b0 [ 256.805982][T11353] ? ion_heap_map_kernel+0x10b/0x3f0 [ 256.811278][T11353] vmalloc+0xf2/0x1a0 [ 256.813466][T11358] hub 9-0:1.0: 8 ports detected [ 256.815257][T11353] ? ion_heap_map_kernel+0x10b/0x3f0 [ 256.815276][T11353] ion_heap_map_kernel+0x10b/0x3f0 [ 256.815300][T11353] ? ion_heap_sglist_zero.isra.0+0x250/0x250 [ 256.815317][T11353] ? lock_downgrade+0x830/0x830 [ 256.815346][T11353] ion_dma_buf_begin_cpu_access+0x176/0x4a0 10:22:47 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) [ 256.815366][T11353] ? __might_fault+0x190/0x1d0 [ 256.852066][T11353] ? ion_dma_buf_end_cpu_access+0x390/0x390 [ 256.858013][T11353] dma_buf_begin_cpu_access+0x76/0x130 [ 256.863486][T11353] dma_buf_ioctl+0x3e6/0x580 [ 256.868100][T11353] ? dma_buf_release+0x3f0/0x3f0 [ 256.873049][T11353] ? __fget_files+0x294/0x400 [ 256.877736][T11353] ? dma_buf_release+0x3f0/0x3f0 [ 256.882683][T11353] compat_ptr_ioctl+0x67/0x90 [ 256.887360][T11353] ? vfs_ioctl+0xd0/0xd0 [ 256.891610][T11353] __do_compat_sys_ioctl+0x1d3/0x230 [ 256.896900][T11353] __do_fast_syscall_32+0x57/0x80 [ 256.901930][T11353] do_fast_syscall_32+0x2f/0x70 [ 256.906812][T11353] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 256.913144][T11353] RIP: 0023:0xf7f62549 [ 256.917217][T11353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.936829][T11353] RSP: 002b:00000000f555c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 256.945250][T11353] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040086200 [ 256.953224][T11353] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.960182][T11370] hub 9-0:1.0: USB hub found [ 256.961191][T11353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.961201][T11353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 256.961210][T11353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.027727][T11370] hub 9-0:1.0: 8 ports detected 10:22:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x550c, 0x0) 10:22:48 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:48 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r0, 0x40, 0x8001}}}, 0x90) [ 257.295422][T11353] syz-executor.0: vmalloc: allocation failure: 8 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.308476][T11353] CPU: 1 PID: 11353 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0 [ 257.317157][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.327212][T11353] Call Trace: [ 257.330510][T11353] dump_stack+0x198/0x1fd [ 257.334850][T11353] warn_alloc.cold+0x87/0x17a [ 257.339535][T11353] ? zone_watermark_ok_safe+0x260/0x260 [ 257.345081][T11353] ? __get_vm_area_node+0x126/0x3b0 [ 257.350309][T11353] ? kmem_cache_alloc_node_trace+0x394/0x3f0 [ 257.356310][T11353] ? __get_vm_area_node+0x2e5/0x3b0 [ 257.361523][T11353] ? ion_heap_map_kernel+0x10b/0x3f0 [ 257.366810][T11353] vmalloc+0x163/0x1a0 [ 257.370888][T11353] ion_heap_map_kernel+0x10b/0x3f0 [ 257.376012][T11353] ? ion_heap_sglist_zero.isra.0+0x250/0x250 [ 257.381998][T11353] ? lock_downgrade+0x830/0x830 [ 257.386874][T11353] ion_dma_buf_begin_cpu_access+0x176/0x4a0 [ 257.392777][T11353] ? __might_fault+0x190/0x1d0 [ 257.397544][T11353] ? ion_dma_buf_end_cpu_access+0x390/0x390 [ 257.403444][T11353] dma_buf_begin_cpu_access+0x76/0x130 [ 257.408908][T11353] dma_buf_ioctl+0x3e6/0x580 [ 257.413501][T11353] ? dma_buf_release+0x3f0/0x3f0 [ 257.418447][T11353] ? __fget_files+0x294/0x400 [ 257.423140][T11353] ? dma_buf_release+0x3f0/0x3f0 [ 257.428081][T11353] compat_ptr_ioctl+0x67/0x90 [ 257.432791][T11353] ? vfs_ioctl+0xd0/0xd0 [ 257.435826][T11385] hub 9-0:1.0: USB hub found [ 257.437034][T11353] __do_compat_sys_ioctl+0x1d3/0x230 [ 257.437058][T11353] __do_fast_syscall_32+0x57/0x80 [ 257.437073][T11353] do_fast_syscall_32+0x2f/0x70 [ 257.437090][T11353] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 257.437108][T11353] RIP: 0023:0xf7f62549 [ 257.449582][T11385] hub 9-0:1.0: 8 ports detected [ 257.452049][T11353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 10:22:48 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x83c0550b, 0x0) [ 257.452059][T11353] RSP: 002b:00000000f555c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 257.452075][T11353] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040086200 [ 257.452085][T11353] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.452093][T11353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.452112][T11353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 257.531995][T11353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.697094][T11396] hub 9-0:1.0: USB hub found 10:22:48 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:22:48 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r0, 0x40, 0x8001}}}, 0x90) [ 257.717456][T11396] hub 9-0:1.0: 8 ports detected [ 257.903435][T11353] Mem-Info: [ 257.906923][T11353] active_anon:267 inactive_anon:112521 isolated_anon:0 [ 257.906923][T11353] active_file:6019 inactive_file:40932 isolated_file:0 [ 257.906923][T11353] unevictable:0 dirty:67 writeback:0 [ 257.906923][T11353] slab_reclaimable:19773 slab_unreclaimable:103258 [ 257.906923][T11353] mapped:59854 shmem:4385 pagetables:1168 bounce:0 [ 257.906923][T11353] free:1226686 free_pcp:345 free_cma:0 [ 258.077670][T11353] Node 0 active_anon:1068kB inactive_anon:443968kB active_file:23936kB inactive_file:163728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:239416kB dirty:264kB writeback:0kB shmem:17540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB kernel_stack:8832kB all_unreclaimable? no [ 258.109925][T11353] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? no [ 258.140464][T11353] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.189030][T11353] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 258.203922][T11353] Node 0 DMA32 free:1137004kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:441876kB active_file:23936kB inactive_file:163728kB unevictable:0kB writepending:264kB present:3129332kB managed:2578220kB mlocked:0kB pagetables:4376kB bounce:0kB free_pcp:2424kB local_pcp:1328kB free_cma:0kB [ 258.236429][T11353] lowmem_reserve[]: 0 0 0 0 0 [ 258.241286][T11353] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.270889][T11353] lowmem_reserve[]: 0 0 0 0 0 [ 258.276659][T11353] Node 1 Normal free:3762420kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.333263][T11353] lowmem_reserve[]: 0 0 0 0 0 [ 258.339586][T11353] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 258.355453][T11353] Node 0 DMA32: 8513*4kB (UME) 1435*8kB (UME) 757*16kB (UME) 635*32kB (UME) 162*64kB (UM) 20*128kB (UME) 13*256kB (UME) 9*512kB (UME) 7*1024kB (ME) 3*2048kB (UME) 250*4096kB (M) = 1136140kB [ 258.376549][T11353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 258.388968][T11353] Node 1 Normal: 79*4kB (UM) 217*8kB (UME) 181*16kB (UME) 93*32kB (UME) 48*64kB (UME) 20*128kB (UME) 10*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 913*4096kB (M) = 3762420kB [ 258.422201][T11353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.431840][T11353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 258.443565][T11353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.454304][T11353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 258.464459][T11353] 50886 total pagecache pages [ 258.469144][T11353] 0 pages in swap cache 10:22:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:49 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r0, 0x40, 0x8001}}}, 0x90) 10:22:49 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:49 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x550c, 0x0) 10:22:49 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) [ 258.479660][T11353] Swap cache stats: add 0, delete 0, find 0/0 [ 258.502188][T11353] Free swap = 0kB [ 258.505991][T11353] Total swap = 0kB [ 258.509711][T11353] 1965979 pages RAM [ 258.515622][T11353] 0 pages HighMem/MovableOnly [ 258.520363][T11353] 349897 pages reserved [ 258.525980][T11353] 0 pages cma reserved [ 258.638021][T11428] hub 9-0:1.0: USB hub found [ 258.657463][T11428] hub 9-0:1.0: 8 ports detected 10:22:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x2, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:49 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:49 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) 10:22:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x10, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:49 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 258.989105][T11456] hub 9-0:1.0: USB hub found [ 258.999804][T11456] hub 9-0:1.0: 8 ports detected 10:22:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x227e, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:49 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 259.123849][T11465] hub 9-0:1.0: USB hub found [ 259.147991][T11465] hub 9-0:1.0: 8 ports detected 10:22:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 259.324600][T11479] hub 9-0:1.0: USB hub found 10:22:50 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x4b61, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x227e, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 259.364337][T11479] hub 9-0:1.0: 8 ports detected 10:22:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x4c01, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:50 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:50 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 259.778544][T11503] hub 9-0:1.0: USB hub found [ 259.799411][T11503] hub 9-0:1.0: 8 ports detected 10:22:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x541b, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:50 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:50 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:50 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 259.998281][T11508] FAULT_INJECTION: forcing a failure. [ 259.998281][T11508] name failslab, interval 1, probability 0, space 0, times 0 [ 260.072574][T11508] CPU: 0 PID: 11508 Comm: syz-executor.4 Not tainted 5.9.0-rc2-syzkaller #0 [ 260.081271][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.091335][T11508] Call Trace: [ 260.094639][T11508] dump_stack+0x198/0x1fd [ 260.098987][T11508] should_fail.cold+0x5/0x14 [ 260.103601][T11508] ? tomoyo_realpath_from_path+0xc3/0x620 [ 260.109349][T11508] should_failslab+0x5/0xf [ 260.113784][T11508] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 260.119866][T11508] __kmalloc+0x6f/0x310 [ 260.124055][T11508] tomoyo_realpath_from_path+0xc3/0x620 [ 260.129615][T11508] ? tomoyo_profile+0x42/0x50 [ 260.134315][T11508] tomoyo_path_number_perm+0x1cb/0x4d0 [ 260.139783][T11508] ? tomoyo_path_number_perm+0x183/0x4d0 [ 260.145514][T11508] ? tomoyo_execute_permission+0x470/0x470 [ 260.151330][T11508] ? find_held_lock+0x2d/0x110 [ 260.156119][T11508] ? ksys_write+0x212/0x250 [ 260.160656][T11508] ? __mutex_unlock_slowpath+0xe2/0x610 [ 260.166231][T11508] ? __fget_files+0x294/0x400 [ 260.170953][T11508] security_file_ioctl+0x50/0xb0 [ 260.175910][T11508] __do_compat_sys_ioctl+0x50/0x230 [ 260.181123][T11508] __do_fast_syscall_32+0x57/0x80 [ 260.186159][T11508] do_fast_syscall_32+0x2f/0x70 [ 260.191046][T11508] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 260.197383][T11508] RIP: 0023:0xf7fe8549 [ 260.201459][T11508] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.221077][T11508] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 260.229522][T11508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000550c [ 260.237502][T11508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.244428][T11524] FAULT_INJECTION: forcing a failure. [ 260.244428][T11524] name failslab, interval 1, probability 0, space 0, times 0 [ 260.245483][T11508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 10:22:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x5421, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 260.245492][T11508] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 260.245501][T11508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.254005][T11523] hub 9-0:1.0: USB hub found [ 260.303822][T11523] hub 9-0:1.0: 8 ports detected [ 260.316675][T11508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.333230][T11524] CPU: 0 PID: 11524 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 260.341920][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.351976][T11524] Call Trace: [ 260.355282][T11524] dump_stack+0x198/0x1fd [ 260.359633][T11524] should_fail.cold+0x5/0x14 [ 260.364236][T11524] ? tomoyo_realpath_from_path+0xc3/0x620 [ 260.369964][T11524] should_failslab+0x5/0xf [ 260.374386][T11524] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 260.380493][T11524] __kmalloc+0x6f/0x310 [ 260.384673][T11524] tomoyo_realpath_from_path+0xc3/0x620 [ 260.390239][T11524] ? tomoyo_profile+0x42/0x50 [ 260.394935][T11524] tomoyo_path_number_perm+0x1cb/0x4d0 [ 260.400406][T11524] ? tomoyo_path_number_perm+0x183/0x4d0 [ 260.406046][T11524] ? tomoyo_execute_permission+0x470/0x470 [ 260.411869][T11524] ? find_held_lock+0x2d/0x110 [ 260.416648][T11524] ? ksys_write+0x212/0x250 [ 260.421184][T11524] ? __mutex_unlock_slowpath+0xe2/0x610 [ 260.426751][T11524] ? __fget_files+0x294/0x400 [ 260.431443][T11524] security_file_ioctl+0x50/0xb0 [ 260.436393][T11524] __do_compat_sys_ioctl+0x50/0x230 [ 260.441606][T11524] __do_fast_syscall_32+0x57/0x80 [ 260.446637][T11524] do_fast_syscall_32+0x2f/0x70 [ 260.451525][T11524] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 260.457881][T11524] RIP: 0023:0xf7fc4549 [ 260.461954][T11524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.481585][T11524] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 260.490002][T11524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000083c0550b [ 260.497994][T11524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.505969][T11524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.513970][T11524] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 260.521953][T11524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:22:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 260.539004][T11529] hub 9-0:1.0: USB hub found [ 260.555128][T11529] hub 9-0:1.0: 8 ports detected 10:22:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x5450, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 260.619002][T11524] ERROR: Out of memory at tomoyo_realpath_from_path. 10:22:51 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x5451, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:51 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:51 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:51 executing program 3: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 260.966754][T11560] hub 9-0:1.0: USB hub found 10:22:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x5452, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 260.991620][T11560] hub 9-0:1.0: 8 ports detected 10:22:51 executing program 2 (fault-call:3 fault-nth:1): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 261.192926][T11565] FAULT_INJECTION: forcing a failure. [ 261.192926][T11565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.206182][T11565] CPU: 0 PID: 11565 Comm: syz-executor.4 Not tainted 5.9.0-rc2-syzkaller #0 [ 261.214859][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.224922][T11565] Call Trace: [ 261.228248][T11565] dump_stack+0x198/0x1fd [ 261.232600][T11565] should_fail.cold+0x5/0x14 [ 261.237200][T11565] __alloc_pages_nodemask+0x183/0x790 [ 261.242589][T11565] ? __alloc_pages_slowpath.constprop.0+0x2830/0x2830 [ 261.249392][T11565] cache_grow_begin+0x71/0x4a0 [ 261.254167][T11565] cache_alloc_refill+0x27b/0x340 [ 261.259211][T11565] ? lockdep_hardirqs_off+0x96/0xd0 [ 261.264435][T11565] ? tomoyo_realpath_from_path+0xc3/0x620 [ 261.270163][T11565] __kmalloc+0x2f0/0x310 [ 261.274442][T11565] tomoyo_realpath_from_path+0xc3/0x620 [ 261.279999][T11565] ? tomoyo_profile+0x42/0x50 [ 261.284690][T11565] tomoyo_path_number_perm+0x1cb/0x4d0 [ 261.290188][T11565] ? tomoyo_path_number_perm+0x183/0x4d0 [ 261.295834][T11565] ? tomoyo_execute_permission+0x470/0x470 [ 261.301650][T11565] ? find_held_lock+0x2d/0x110 [ 261.306433][T11565] ? ksys_write+0x212/0x250 [ 261.310968][T11565] ? __mutex_unlock_slowpath+0xe2/0x610 [ 261.316536][T11565] ? __fget_files+0x294/0x400 [ 261.321230][T11565] security_file_ioctl+0x50/0xb0 [ 261.326182][T11565] __do_compat_sys_ioctl+0x50/0x230 [ 261.331402][T11565] __do_fast_syscall_32+0x57/0x80 [ 261.336436][T11565] do_fast_syscall_32+0x2f/0x70 [ 261.341295][T11565] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 261.347623][T11565] RIP: 0023:0xf7fe8549 [ 261.351717][T11565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.371318][T11565] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 261.379728][T11565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000550c 10:22:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x5460, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:52 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r0, 0x40, 0x8001}}}, 0x90) [ 261.387718][T11565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.395688][T11565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.403662][T11565] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 261.411635][T11565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:22:52 executing program 3: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x560a, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:52 executing program 1 (fault-call:7 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:52 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r0, 0x40, 0x8001}}}, 0x90) 10:22:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 261.735510][T11586] FAULT_INJECTION: forcing a failure. [ 261.735510][T11586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.748739][T11586] CPU: 0 PID: 11586 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 261.757443][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.767502][T11586] Call Trace: [ 261.770839][T11586] dump_stack+0x198/0x1fd [ 261.775188][T11586] should_fail.cold+0x5/0x14 [ 261.779819][T11586] __alloc_pages_nodemask+0x183/0x790 [ 261.785214][T11586] ? __alloc_pages_slowpath.constprop.0+0x2830/0x2830 [ 261.791998][T11586] cache_grow_begin+0x71/0x4a0 [ 261.796774][T11586] cache_alloc_refill+0x27b/0x340 [ 261.801816][T11586] ? lockdep_hardirqs_off+0x96/0xd0 [ 261.807031][T11586] ? tomoyo_realpath_from_path+0xc3/0x620 [ 261.812786][T11586] __kmalloc+0x2f0/0x310 [ 261.817054][T11586] tomoyo_realpath_from_path+0xc3/0x620 [ 261.822619][T11586] ? tomoyo_profile+0x42/0x50 [ 261.827323][T11586] tomoyo_path_number_perm+0x1cb/0x4d0 [ 261.832807][T11586] ? tomoyo_path_number_perm+0x183/0x4d0 [ 261.838456][T11586] ? tomoyo_execute_permission+0x470/0x470 [ 261.844296][T11586] ? find_held_lock+0x2d/0x110 [ 261.849102][T11586] ? ksys_write+0x212/0x250 [ 261.853643][T11586] ? __mutex_unlock_slowpath+0xe2/0x610 [ 261.859212][T11586] ? __fget_files+0x294/0x400 [ 261.863928][T11586] security_file_ioctl+0x50/0xb0 [ 261.868881][T11586] __do_compat_sys_ioctl+0x50/0x230 [ 261.874094][T11586] __do_fast_syscall_32+0x57/0x80 [ 261.879250][T11586] do_fast_syscall_32+0x2f/0x70 [ 261.884134][T11586] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 261.890581][T11586] RIP: 0023:0xf7fc4549 [ 261.894661][T11586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.914280][T11586] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 261.922699][T11586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000083c0550b [ 261.930677][T11586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.938656][T11586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.946633][T11586] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 261.954609][T11586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:22:53 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:53 executing program 3: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x6364, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:53 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r0, 0x40, 0x8001}}}, 0x90) 10:22:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:53 executing program 2 (fault-call:3 fault-nth:2): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 262.774812][T11621] hub 9-0:1.0: USB hub found [ 262.797927][T11621] hub 9-0:1.0: 8 ports detected 10:22:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x8912, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:53 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x2) [ 262.940763][T11638] hub 9-0:1.0: USB hub found [ 262.951540][T11638] hub 9-0:1.0: 8 ports detected [ 262.994918][T11625] FAULT_INJECTION: forcing a failure. [ 262.994918][T11625] name failslab, interval 1, probability 0, space 0, times 0 [ 263.034292][T11630] FAULT_INJECTION: forcing a failure. 10:22:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x8933, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 263.034292][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 263.064719][T11625] CPU: 0 PID: 11625 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 263.073424][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.083836][T11625] Call Trace: [ 263.087145][T11625] dump_stack+0x198/0x1fd [ 263.091499][T11625] should_fail.cold+0x5/0x14 [ 263.096106][T11625] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.101489][T11625] should_failslab+0x5/0xf [ 263.105926][T11625] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 263.111990][T11625] __kmalloc+0x6f/0x310 [ 263.116145][T11625] ? __d_path+0x160/0x160 [ 263.120477][T11625] tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.125676][T11625] tomoyo_encode+0x28/0x50 [ 263.130094][T11625] tomoyo_realpath_from_path+0x186/0x620 [ 263.135760][T11625] tomoyo_path_number_perm+0x1cb/0x4d0 [ 263.141228][T11625] ? tomoyo_path_number_perm+0x183/0x4d0 [ 263.146862][T11625] ? tomoyo_execute_permission+0x470/0x470 [ 263.152664][T11625] ? find_held_lock+0x2d/0x110 [ 263.157435][T11625] ? ksys_write+0x212/0x250 [ 263.161965][T11625] ? __mutex_unlock_slowpath+0xe2/0x610 [ 263.167516][T11625] ? __fget_files+0x294/0x400 [ 263.172193][T11625] security_file_ioctl+0x50/0xb0 [ 263.177134][T11625] __do_compat_sys_ioctl+0x50/0x230 [ 263.182332][T11625] __do_fast_syscall_32+0x57/0x80 [ 263.187349][T11625] do_fast_syscall_32+0x2f/0x70 [ 263.192196][T11625] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 263.198529][T11625] RIP: 0023:0xf7fc4549 [ 263.202592][T11625] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.222192][T11625] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 263.230605][T11625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000083c0550b [ 263.238568][T11625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.246555][T11625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.254526][T11625] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 263.262490][T11625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.277759][T11651] hub 9-0:1.0: USB hub found [ 263.283019][T11651] hub 9-0:1.0: 8 ports detected [ 263.306341][T11630] CPU: 0 PID: 11630 Comm: syz-executor.4 Not tainted 5.9.0-rc2-syzkaller #0 [ 263.315041][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.325094][T11630] Call Trace: [ 263.328398][T11630] dump_stack+0x198/0x1fd [ 263.332747][T11630] should_fail.cold+0x5/0x14 [ 263.337350][T11630] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.342725][T11630] should_failslab+0x5/0xf [ 263.347143][T11630] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 263.353216][T11630] __kmalloc+0x6f/0x310 [ 263.357369][T11630] ? __d_path+0x160/0x160 [ 263.361701][T11630] tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.366903][T11630] tomoyo_encode+0x28/0x50 [ 263.371316][T11630] tomoyo_realpath_from_path+0x186/0x620 [ 263.376955][T11630] tomoyo_path_number_perm+0x1cb/0x4d0 [ 263.382408][T11630] ? tomoyo_path_number_perm+0x183/0x4d0 [ 263.388036][T11630] ? tomoyo_execute_permission+0x470/0x470 [ 263.393845][T11630] ? find_held_lock+0x2d/0x110 [ 263.398611][T11630] ? ksys_write+0x212/0x250 [ 263.403157][T11630] ? __mutex_unlock_slowpath+0xe2/0x610 [ 263.408712][T11630] ? __fget_files+0x294/0x400 [ 263.413392][T11630] security_file_ioctl+0x50/0xb0 [ 263.418335][T11630] __do_compat_sys_ioctl+0x50/0x230 [ 263.423538][T11630] __do_fast_syscall_32+0x57/0x80 [ 263.428556][T11630] do_fast_syscall_32+0x2f/0x70 [ 263.433403][T11630] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 263.439720][T11630] RIP: 0023:0xf7fe8549 10:22:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 263.443784][T11630] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.464510][T11630] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 263.472912][T11630] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000550c [ 263.480871][T11630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.488830][T11630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.496801][T11630] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 263.504765][T11630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.628920][T11661] hub 9-0:1.0: USB hub found [ 263.655881][T11661] hub 9-0:1.0: 8 ports detected [ 263.677821][T11625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.702445][T11630] ERROR: Out of memory at tomoyo_realpath_from_path. 10:22:55 executing program 4 (fault-call:3 fault-nth:3): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:55 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x400448c9, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x3f00) 10:22:55 executing program 2 (fault-call:3 fault-nth:3): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) [ 264.327840][T11682] hub 9-0:1.0: USB hub found [ 264.340122][T11682] hub 9-0:1.0: 8 ports detected 10:22:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x400448dd, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:55 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:55 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 264.483237][T11700] hub 9-0:1.0: USB hub found [ 264.488342][T11700] hub 9-0:1.0: 8 ports detected [ 264.613602][T11694] FAULT_INJECTION: forcing a failure. [ 264.613602][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 264.627710][T11708] hub 9-0:1.0: USB hub found [ 264.633085][T11694] CPU: 1 PID: 11694 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 264.641773][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.642551][T11708] hub 9-0:1.0: 8 ports detected [ 264.651826][T11694] Call Trace: [ 264.651850][T11694] dump_stack+0x198/0x1fd [ 264.651874][T11694] should_fail.cold+0x5/0x14 [ 264.651899][T11694] should_failslab+0x5/0xf [ 264.673309][T11694] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 264.679382][T11694] kmem_cache_alloc_trace+0x49/0x2c0 [ 264.684674][T11694] ? __mutex_unlock_slowpath+0xe2/0x610 [ 264.690341][T11694] raw_ioctl+0x4bc/0x1ca2 [ 264.694688][T11694] ? gadget_bind+0x780/0x780 [ 264.699294][T11694] ? bpf_lsm_file_ioctl+0x5/0x10 [ 264.704232][T11694] ? gadget_bind+0x780/0x780 [ 264.708831][T11694] __do_compat_sys_ioctl+0x1d3/0x230 [ 264.714139][T11694] __do_fast_syscall_32+0x57/0x80 [ 264.719168][T11694] do_fast_syscall_32+0x2f/0x70 [ 264.724025][T11694] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 264.730359][T11694] RIP: 0023:0xf7fc4549 [ 264.734434][T11694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 264.754043][T11694] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 10:22:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x400454ca, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 264.762460][T11694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000083c0550b [ 264.770432][T11694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.778429][T11694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.786402][T11694] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 264.794375][T11694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:22:55 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 264.941904][T11723] hub 9-0:1.0: USB hub found [ 264.950494][T11723] hub 9-0:1.0: 8 ports detected 10:22:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) 10:22:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40046201, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:56 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x4000) [ 265.310272][T11736] hub 9-0:1.0: USB hub found [ 265.328217][T11736] hub 9-0:1.0: 8 ports detected 10:22:56 executing program 2 (fault-call:3 fault-nth:4): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:56 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40049409, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 265.551316][T11755] hub 9-0:1.0: USB hub found [ 265.566954][T11755] hub 9-0:1.0: 8 ports detected 10:22:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40085c00, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 265.634088][T11758] hub 9-0:1.0: USB hub found [ 265.640679][T11758] hub 9-0:1.0: 8 ports detected 10:22:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:56 executing program 5: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 266.007613][T11779] hub 9-0:1.0: USB hub found [ 266.034867][T11779] hub 9-0:1.0: 8 ports detected 10:22:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x2, 0x0) 10:22:56 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086202, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x1000000) 10:22:56 executing program 5: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 266.240680][T11789] hub 9-0:1.0: USB hub found [ 266.264807][T11789] hub 9-0:1.0: 8 ports detected 10:22:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 10:22:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:57 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:57 executing program 5: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086204, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 266.566597][T11814] hub 9-0:1.0: USB hub found [ 266.582049][T11814] hub 9-0:1.0: 8 ports detected 10:22:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086205, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:57 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 266.897163][T11835] hub 9-0:1.0: USB hub found [ 266.906121][T11835] hub 9-0:1.0: 8 ports detected 10:22:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x10, 0x0) 10:22:57 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086206, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 267.031203][T11843] hub 9-0:1.0: USB hub found [ 267.041854][T11843] hub 9-0:1.0: 8 ports detected 10:22:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x2000000) 10:22:57 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 267.257324][T11855] hub 9-0:1.0: USB hub found [ 267.269205][T11855] hub 9-0:1.0: 8 ports detected 10:22:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x2, 0x0) 10:22:58 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086207, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:58 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 267.477073][T11869] hub 9-0:1.0: USB hub found 10:22:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x4018620d, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 267.499108][T11869] hub 9-0:1.0: 8 ports detected 10:22:58 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40186366, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4b52, 0x0) 10:22:58 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x4020940d, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 267.830727][T11894] hub 9-0:1.0: USB hub found [ 267.840172][T11894] hub 9-0:1.0: 8 ports detected [ 267.974904][T11905] hub 9-0:1.0: USB hub found [ 267.998184][T11905] hub 9-0:1.0: 8 ports detected 10:22:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x3f000000) 10:22:58 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 268.129246][T11918] hub 9-0:1.0: USB hub found [ 268.152414][T11918] hub 9-0:1.0: 8 ports detected 10:22:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x10, 0x0) 10:22:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x402c5828, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:59 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:59 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x402c5829, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:59 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 268.374762][T11937] hub 9-0:1.0: USB hub found [ 268.394023][T11937] hub 9-0:1.0: 8 ports detected 10:22:59 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 268.548347][T11950] hub 9-0:1.0: USB hub found [ 268.554038][T11950] hub 9-0:1.0: 8 ports detected 10:22:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4c01, 0x0) 10:22:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x402c582a, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:22:59 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x40000000) 10:22:59 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x2283, 0x0) 10:22:59 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:22:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x402c582b, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 269.050071][T11970] hub 9-0:1.0: USB hub found [ 269.062933][T11970] hub 9-0:1.0: 8 ports detected 10:22:59 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:00 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x402c5839, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 269.245602][T11989] hub 9-0:1.0: USB hub found [ 269.256200][T11989] hub 9-0:1.0: 8 ports detected 10:23:00 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x541b, 0x0) 10:23:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x80086301, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:00 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 269.507210][T12005] hub 9-0:1.0: USB hub found [ 269.517831][T12005] hub 9-0:1.0: 8 ports detected 10:23:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0xffffffff) 10:23:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0045878, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4b52, 0x0) 10:23:00 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:00 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0045878, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 270.173664][T12035] hub 9-0:1.0: USB hub found [ 270.205999][T12035] hub 9-0:1.0: 8 ports detected 10:23:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc00c642e, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:01 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5421, 0x0) 10:23:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0184900, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 270.520462][T12054] hub 9-0:1.0: USB hub found [ 270.539193][T12054] hub 9-0:1.0: 8 ports detected 10:23:01 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r2}) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0xfffffffffffffd0a) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0189436, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4b6b, 0x0) 10:23:01 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc020660b, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:01 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x606f) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5450, 0x0) 10:23:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0306201, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:02 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:02 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0245629, &(0x7f0000000280)={0x0, 0x8, 0x6, [], &(0x7f0000000100)=0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008270000000000000000000000006962ff833a7e165a0211de43e52631bf446f7e5b17ce38ae2cb7c5ad450441c16235af1e132005623d4080cdff69f5868215aeaba93ebbbc96cebb147b9d130b1295bd030097cb0cb15d0067493312a65c4a9704a14b5be7da87d780764e614dfe2285d364c468206787e48db3b7095172214b32299a238b3da4dd88921b842d122c8c10a3c47de673b8adad6764c685764267ffa38ce8d395c72425f6e3bcd6228faf833d679ebfa8e79bdd2b67ffbb94ccf64fac6eabb08aa9fccf00dbb0dcd7e2b69b0c63b8bea3c9ef2d694f6f20d5b3f35889587e74f7e44bdbbb18ab93c48e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4b6c, 0x0) 10:23:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc100565c, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:02 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:02 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffdb1) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001300)={r3, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team0\x00', r3}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x16, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d0}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r7, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2) r8 = dup3(r5, r6, 0x0) signalfd4(r5, &(0x7f0000000080)={[0x6, 0x2]}, 0x8, 0x800) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xff169) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000380)="c4a28596648f0666baf80cb8308fff8cef66bafc0c66b8cc9366ef66410fc77700c744240027000000c744240206438820ff2c24dc4100f3420f58ed260f08c48179709b010000000936410f320f78bcff00000000", 0x55}], 0x1, 0x2, &(0x7f0000000400), 0x0) 10:23:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc10c5541, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:02 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5451, 0x0) 10:23:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2a08c1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:03 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x4) dup3(r2, r3, 0x0) 10:23:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4c00, 0x0) 10:23:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) dup3(r2, r3, 0x0) 10:23:03 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) dup3(r2, r3, 0x0) 10:23:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x9f5, 0x4202) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f00000003c0)={0x1, [[0x40, 0x20, 0xda9c, 0x8, 0x1, 0x7, 0x7fffffff, 0x4], [0x9, 0x6, 0x177, 0x9, 0x6, 0x6, 0x10000, 0x82b], [0x10001, 0xb8, 0x7, 0xfffffff7, 0x8, 0x7ff, 0x0, 0xfffffffe]], [], [{0x7, 0x3c7e}, {0x7, 0x5, 0x1, 0x0, 0x1}, {0x225, 0xfffff801, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x800, 0x1}, {0x8001, 0x2, 0x1}, {0x20, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1ff, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x4fd, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x1, 0x0, 0x1}, {0x100, 0x7, 0x1}, {0xaa1, 0xfffeffff, 0x0, 0x1, 0x1}], [], 0x1}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0xf81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000340)={r8, 0x6a, "e9acddf2abafa67fd52ce34e6dbd3343143b5ae8ad28eb967ad52c5ddd4e3a10b5ef852f31d5c9579bdb01000000fe95eeea40d94f73f89ff6497b2c34b8cf7191264751cffbbcd41f752dcfdf14e5d35fb2ff1867adb6c49269f67eda7e72b6ce0ce9834dff3d89c4cb"}, &(0x7f00000002c0)=0x72) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r9}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) 10:23:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5452, 0x0) 10:23:03 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x8) dup3(r2, r3, 0x0) 10:23:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004805) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) [ 273.208850][T12203] hub 9-0:1.0: USB hub found [ 273.239253][T12203] hub 9-0:1.0: 8 ports detected 10:23:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4c01, 0x0) 10:23:04 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x402040, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) dup3(r2, r7, 0x0) 10:23:04 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:04 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 10:23:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000000, 0x300) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:04 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:04 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x40010, r5, 0xbe5c7000) [ 274.081660][T12255] hub 9-0:1.0: USB hub found [ 274.108627][T12255] hub 9-0:1.0: 8 ports detected 10:23:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x541b, 0x0) 10:23:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9, 0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x4200, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000180)={0x0, 0x7f, 0xac09, 0x2, 0x6, 0x80, 0x9, 0x10001, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) 10:23:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/253, 0xfd}, 0x22060) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:05 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:05 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:05 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 274.548253][T12276] hub 9-0:1.0: USB hub found [ 274.568643][T12276] hub 9-0:1.0: 8 ports detected 10:23:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x99fb68ad224dfed) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5501, 0x0) 10:23:05 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:05 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r5 = openat$zero(0xffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x9, 0x7, 0x3, 0x7f, 0x0, 0x2, 0x50000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x4}, 0x2600, 0x9c0, 0x2ef, 0x9, 0x1, 0xffff, 0x4}, r2, 0x9, r2, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r6], 0x1) r7 = openat$binder_debug(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0186405, &(0x7f0000000300)={0xffffffff, 0x3, {}, {}, 0x3, 0xc3}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x4}, 0x16, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 274.950263][T12302] hub 9-0:1.0: USB hub found 10:23:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$autofs(0xffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x30083, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0)) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r4, 0x0) [ 274.971466][T12302] hub 9-0:1.0: 8 ports detected 10:23:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5421, 0x0) 10:23:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8b1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000100)={0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) dup3(r2, r3, 0x0) 10:23:06 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:06 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) set_mempolicy(0x0, &(0x7f0000000080)=0x7c, 0x7ff) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 275.449208][T12331] hub 9-0:1.0: USB hub found [ 275.467038][T12331] hub 9-0:1.0: 8 ports detected 10:23:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) r5 = dup2(r4, r0) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) ioctl$sock_ifreq(r4, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) vmsplice(r6, &(0x7f0000000740)=[{&(0x7f0000000280)="bbf4b217eb38f400aacfdad379185f1b0e33978da994fa426d28907862319dc7958418c1babeefd06fe9a9e41c6b55fb6a4ec7ea13ba13e474d90b28e4f388d46842825d86040f293e4541cbe4684f467bce0a763c3b49e9f3d8ba45995516b12f9ecf619c8bf49ad4d256263f0c43ce024574d75d6ae4c61a755181762fc772cd32a60ed42e8645de87d15ff26d48ab37c2d1424db2e03c2e6d7754ba6228ef7a136f3a787fadae04191a701a26fa84485127e3c5ff037aeebabfd561952ce96e755eeb13ff3880a18af83389031c643557ef4345cfdf4eb759cc3f602ed7686f94d49c9b1362307f", 0xe9}, {&(0x7f0000000180)="1047e0cd50670d78cd969d0e8e74c3f57c9942ae4f5f8ef0b183647f965cc1f6c9168d9d8ba68630ee623c30f48f28f5e571afe31a243673ac8ba2ca22322e9046fb35c03c9a9bddb8b652060138377483ca64", 0x53}, {&(0x7f0000000380)="cd2b284bc31c2caa97d879e71d8193f5287af95e5c8c053e90e4853958540f5610ad333f93191f91929d83e69bba7d7f6ff4f5b590799748553f70b3e34e2ba4f66a7062adcfd381738175f57b6d602f1e70c2f21912cc25c1bb596cd20f7d0feac6cd63e963ee5e19f3dac1c4306c98f8f6329bdcac6521327ab5220b3178cf4bd0f9818699e5d92cd4fe6bac4b63f8eee245efb10fcfe48cdb635553f31e907354cb35c0606f3db7e7dcbe95aaebc80f14714e7997b38dc0cf115ed48c608662c0bfd9dd9f69f8fc9c8776671c603ad29d2408d21d", 0xd6}, {&(0x7f0000000480)="67a2ffbf276b2963047df560f89e6f220ef99d947366f35ddf370b620f38e1bf6b4c85147fcaa42f51874b92a3f7efb016ccda37522656a36e374346102c8a57c7433cd0d976460d13b3ed5f065cdf120afde4546787a6e3ba412d810142af09f4cf20ad303e954129b2e5860063412d71aac6ae4e9df28e0a25844722a9dfa95774fdcae3afe38da574d21b57570df1a624a8b24dde87852601164ddd3ca9a4b348f072f3cf3cf995822735b07fbb477287f9f10d76ed", 0xb7}, {&(0x7f0000000100)="dd48a10e375aa304c5de797d0a07c310cc358f97a1437e49ac008bb6f0d3c007ab71efcee791724a04ad0fbe5b0388931ffc7eb0cefddbf60ce3", 0x3a}, {&(0x7f0000000540)="6928bfc254cc5a28cd5d31b45fd691be26e59d5d8974a884bd416bbe64f57e5a6da9d35d4418516aaf823cd00604073b90f8f2993ce20e4435d0b22d5265e7d71cfde824592017bbe52cb00f8887b1b44755f19bc2dc6cee8021ddd1da5c7ffc77fb75ef1e549684d5f87badc86e8bbe1a9046e3f8a433713f50f004e0e9cbd973f9e004ec87389a", 0x88}, {&(0x7f0000000600)="0e2937246a1db755e9a073cc40b8223f927f5ed9d75d8703d15e2196e7f276df7dfdc1a4ef35b96595306c6ecf46279ae4abef733e30ef4a12a1cd", 0x3b}, {&(0x7f0000000640)="b7266b471cb16c58170ce7ac1c2281b8cf987f323fa99b7ac9b529de01b5585d9dea1bbc7e9aa0b6a124f10f604ee8db6c330e341aa7b751352370cb629fe348b3fe013d5cec2a5862a9465b3aa587fdccc9de00c3cf80a16cd44e6c595834602196beb28385f2af39de94beb45509518b40d17bf2cd174f01466c31ef70cf14472e87b9b3eb4998dcd7c5c4c31814576da3182be8c183526b5dc4b94e67245623209cf84586e301f5f1d6e7bcc3b893cf9510202e62e89d519ca9f33086f3dd8cd50584aa8efb2bfa4572a8e476e8b1828b73604f8ec8d954fa9bf9cdfd2407fb5f0f6bf5a4e6ea117562d7bb01a9f1ef5a33e4846788a976e7e7", 0xfb}], 0x8, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000080)=0xffff, &(0x7f00000000c0)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x84c0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000000)={0x1ff, 0x9, 0xffffffff, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x2) dup3(r2, r3, 0x0) 10:23:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5509, 0x0) 10:23:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x8, 0x101, 0x7, 0x1]}, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) 10:23:06 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:06 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r4, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)=0x1024) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) r6 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000016c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001680)=r2, 0x4) r8 = dup3(r1, r3, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000001640)=0x4, 0x4) sendmsg$sock(r8, &(0x7f0000000580)={&(0x7f0000000080)=@rc={0x1f, @fixed={[], 0x12}, 0x65}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="71ce4c09f39b235da6020356a14cd45d59204a1ee656cfacef0fb34993d39240f1e76a71002a0192a7587dcdd644b13809de03fa9cb3a9ce964a687359b2b6e550848c9be77b9c90eee1394dd0a0e32043eae2bd6eaa0a5312a4973b5571579e2c921febe672892102eebda7e869f0c8e63861d32565c1e1859177a0f48dd55235ee3927723bd0a09c152869f2e190ebd88c0175bbc38fb9286a6b82abf9131f9f93c09f5c15619114fa1204d51dcaf0bc7766bc7e45e4cc", 0xb8}, {&(0x7f0000000340)="f21ce1600093b66e40d7a16d9c23a270438219ef5adf8bcae45bc9b41a2831e0c3f8ae49e7c0584b9ec3d881b4a70cde4f2cf7cc673dc7d695b3ee18bf4cc13cba80be44c0faf3171d001cdeff425e0e893bd82c4de8de3d1b501a350808957542879097e7fe261a1f199e7c3af40bc120a2abdf7aec0d09ec2ad0c281c4e60219479ffadb160b935b58399ec58a15e4092afad7a7f4b0d3747653aeaac40889f09f06c353eca589c50522a80c906e90c193b81b9efa6637a6e8b23b6821c5bd3e48553e3e344091963346fb80940817694f2d6c6a10e9444279fe7ca11b8ee23fb9f428fc1cc7fcd08a", 0xea}, {&(0x7f0000000100)="72db56b41a87d0d9e462acd4f6c9b879bcfcbc9657417b", 0x17}, {&(0x7f0000000180)="de8a12a16681c57ff2cef4", 0xb}, {&(0x7f00000001c0)="e8507a26d3a6367dbd510558e1d3b5994d1011bdc1e79fb99ed3bfdbeff3f3bb90a5cf33504663f414f79ba72881f167600ac4fa9daf", 0x36}, {&(0x7f0000000440)="426623a49134a697b6f5c00ef07711e4c7c59633b2bf14e35cfab5df66637d1df21b2aab6a6568fa0234", 0x2a}, {&(0x7f0000000480)="1c51f4d91a0197204733844109d5c5579d25e5a7083a5a363bcc5c4c19395ada7f3b2e251b03d0e2b2487540bac60f9ab054acc85f2a3d73631d7437c3701bd5cf971b44b8239526f80d8564d737d0ea44e2c09f939482fa8d471d383a2d4add1592cafd7b701c0612bcee9c852cbd158e6a8355dbb3e09d146be7fe856a7b955504bb0a17ac257225fc6c034d924680eabb687aa4a4ff470a62c80bde04f0d483eb123c20e65bc96408252178ed61a347d293e5bbf73972be8e254f85cd", 0xbe}], 0x7}, 0x4000) 10:23:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5450, 0x0) 10:23:06 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000bc0)=@assoc_id=0x0, &(0x7f0000000c00)=0x4) sendmmsg$inet_sctp(r2, &(0x7f0000000c80)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)="d6d02039532e7ea7ba1ca6f810bac82b31c846d7762c2c40b1c30c0825c2f6049909cb9bf0c78882bebc7a373917bc7a62b5fe04f19c39fb96f189ce62ab5b4bf97ad64aade21af71cd70d10142599cf6fc1dadd1d043bb6633223d8b43a574c167382a65f8411dbe3109ee0ebdc5f77f9414641c6b1186b07d52002cb7952c9f25ce8bc5537960af5867e577ced9b2f59b6a8ae68ff107e3b61037d24a3e1331226a1c939c4aaac69d5a969b9ba9fe36e30b2d7076629db59047c108fed6a40bbb434", 0xc3}, {&(0x7f0000000380)="0f23412f6252015a4ba56284ba433beb7cd402a3b5e7719a80030655240c8cafb75cde11e627c574290a37b9aafdfbcb86dcb8c173f46d1e98a74387c3adb2b6327d304ec7f7c880a27cc7d1531b43c1c5ec217b350a7d5cf4d7b992b665df068e76d021ab4465630179c97c8e1a1f8accec311c67e456d560cbfa3a31b2bed669d880d3f2f957d0ee7a3780e35b35f92c8dfda471fb1604ad2b3b798d747d18638b6a78bbf248c95df2772855ebbb2865dd9b1d7ff0a656f9d5de1de033775c0e5058ab910ce39a19ef296445eda23704dd590dc8b01faa17add3642bdad7edfd1af84835a0934c22fd6cb96dff1b14ed4200eb", 0xf4}], 0x2, &(0x7f0000000180)=[@sndinfo={0x1c, 0x84, 0x2, {0x8001, 0x8201, 0x2, 0xce, r5}}, @dstaddrv6={0x1c, 0x84, 0x8, @empty}, @authinfo={0x10, 0x84, 0x6, {0x800}}], 0x48, 0x4000}, {&(0x7f0000000100)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000480)="302b9419c3bb6b6ae927fa5f19a7ff3dace0fe34396920ba722efe7085ca38f32fad22348b3171cc9e2f83de6296f0f65ebe0036c045e88fb4bb9e93c44a57b93789b3a1e7aaa39c81b6de30def3815004a1aa59144e7680e1b53ecdf6000000000000000000000000000000000000000000000000ff000000", 0x79}, {&(0x7f0000000500)="55b80763d15c8add21d1cfb058a542e27af4b83fe5", 0x15}, {&(0x7f0000000540)}, {&(0x7f0000000d80)="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", 0x190}, {&(0x7f0000000680)="62dfae1addabb5ea70aae6300a30212a36fabbe644b7b797728a5de2d17f30db4000f9ab8e682ecb96bc90e0a83988d87934dbd2c4a7ba1d924d5be4ebfd4a2cc4266334e183e4b5fffc22bf62429e0ed9090d6ab338dd1161c600c07072f3161c17f5b68c4fdfd5a83c904065b7d712c34d294518ff5e3f44512607704d570d20c9bf8694ae0301c788ad35aa0cabb4ed1abd9233cd7fb4f576cee7749d8e0850c9d7d127da8752835e76b5d931d670a90887410b", 0xb5}], 0x5, 0x0, 0x0, 0x40400c0}, {&(0x7f0000000740)=@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000800)="c286a7826c03b06658ebc3", 0xb}, {&(0x7f0000000840)="7f89fb2d3c2e5fa9af09000000000000005a6a8fcfc6", 0x16}, {&(0x7f0000000580)="76aca6ac7bf0b0f39651a81b697450db9d65f82b6c0fefabc620ac916e02f1fd7a6f84d80d245825297f4b445a924058a0519b9770586c05744c84e5988ce4f4cf61a719121262d8365000c46abb57ec8459eac2a8812fd954240d8e5ea00ca3a0438a97d477c0a691e24241a46fc25ad73080071ebabaa690f057659441e3029063f5d517b8cac0d44ab92c6ab18117daa77e89ee9b00f99c95788fd8a3bd6d5c5e8438c58a", 0xa6}, {&(0x7f0000000640)="642e599b4c162ca156aa56a45bc419ccf669d4", 0x13}, {&(0x7f0000000980)="40e9b4f0453fe158d580a08a6ae13045de1476a88e1e1b34b4f10a62d00946d1de70609ec03b93b4690f257d4abc5e6b5eec9ad44b37454f76f40d855d8661682986a7947be6ba9cd0442dc55a3b0a17259d7a6aa7641336621268072ce0090b5650bf5606ffbb827c37596bc5fc11e149f3c99a4cd6ec243e0c0c265017", 0x7e}, {&(0x7f0000000a00)="3619912a52ac95ef60f283f58cb202a4e8497c34384f47d47d7b85c4c8fcd2821d800bf48be68de73f402f7a6018a164b107de0d8f7c4da39aee19ff0343576221c2ea7b2c473b8eb20245afd8d84df3ecd44385de6da828f397d759fc6dcabcf70a1b6f09bf5a20e81232c2ccac62bf77b06e78e22eab3fecd02a9de13d59767e5844c76d99115169abcb111049a0e3f7c0c7b493692670d4dedfcfbb0738b52c6c83c858dea2c863f40b2959b77c7beb1c158bdbf926e8378eda72c18b46dffc7ba225150e170a507b5f08bcfc17425b5d173e846dfba82e0abc535ba69e", 0xdf}, {&(0x7f0000000b00)="d1487d0c948b1f5831d2c1b2e9ccf4373d42ec2a3251ae5b401daf1a1da3cf9a4c074f86537d2acffd4a669787cb0c7248f0d305325670478dcb6e500d6d33b71001a6dec6f47a2af77575bc93242b38e97f446783f3df6bac3e690cdfc2104275e0ff8df6bc2873fc3e57286dd7ae651c7cbb85e88c2a4a739d1bde4c", 0x7d}], 0x7, &(0x7f0000000c40)=ANY=[@ANYRES32=r0, @ANYRES32=r5], 0x1c, 0x1040}], 0x3, 0x40000) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r6 = openat$bsg(0xffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x101280, 0x0) write$P9_RSTAT(r6, &(0x7f0000000d00)=ANY=[@ANYBLOB="4a0000007d02000000430006000000000000030000000700000000000000000020000600000014390000010000000100000002002b2106f535285dbd5c7d01002407002e2d2a5d5e232e"], 0x4a) 10:23:06 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) dup3(r2, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) r6 = getpid() ptrace(0x4206, r6) rt_tgsigqueueinfo(r6, r6, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffbfffffffc58e}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000280)={{0x6, 0x6, 0xfffffff8, 0x0, 'syz0\x00', 0x2}, 0x0, 0x100, 0x0, r6, 0x3, 0x7f, 'syz1\x00', &(0x7f0000000080)=['/dev/ion\x00', '/dev/dri/card#\x00', '{\x00'], 0x1a, [], [0x6, 0xf6b3, 0x9, 0x9]}) [ 276.156344][T12381] hub 9-0:1.0: USB hub found [ 276.178875][T12381] hub 9-0:1.0: 8 ports detected 10:23:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 10:23:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 276.395711][T12397] hub 9-0:1.0: USB hub found [ 276.400728][T12397] hub 9-0:1.0: 8 ports detected 10:23:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5510, 0x0) 10:23:07 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x72) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000080)=[0x1, 0x3], 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) openat$cachefiles(0xffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 276.898871][T12422] hub 9-0:1.0: USB hub found 10:23:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x82400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8000) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x2000) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) 10:23:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5451, 0x0) 10:23:07 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 276.927898][T12422] hub 9-0:1.0: 8 ports detected 10:23:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x80ef01) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f00000000c0)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = eventfd(0x1f) dup3(r2, r5, 0x0) [ 277.157529][T12437] hub 9-0:1.0: USB hub found [ 277.164800][T12437] hub 9-0:1.0: 8 ports detected 10:23:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r5, 0x0) 10:23:08 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5517, 0x0) 10:23:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x100204) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:08 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(0x0, 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:08 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 277.580845][T12462] hub 9-0:1.0: USB hub found [ 277.613808][T12462] hub 9-0:1.0: 8 ports detected [ 277.672533][T12466] hub 9-0:1.0: USB hub found [ 277.681344][T12466] hub 9-0:1.0: 8 ports detected 10:23:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001300)={r1, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_getnetconf={0x44, 0x52, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x800}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x440e0}, 0x4000000) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x3, 0x6}) dup3(r5, r6, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x40100) r8 = syz_io_uring_complete(0x0) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000100)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) 10:23:08 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5452, 0x0) 10:23:08 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(0x0, 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) dup3(r2, r3, 0x0) [ 278.008101][T12486] hub 9-0:1.0: USB hub found [ 278.044216][T12486] hub 9-0:1.0: 8 ports detected 10:23:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r4, 0x0) 10:23:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(0x0, 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 278.301237][T12507] hub 9-0:1.0: USB hub found [ 278.306894][T12507] hub 9-0:1.0: 8 ports detected 10:23:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x555d, 0x0) 10:23:09 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 278.458215][T12519] hub 9-0:1.0: USB hub found 10:23:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = dup3(r2, r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xfffffffffffffdba) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000000c0)={@remote, r6}, 0x14) [ 278.495998][T12519] hub 9-0:1.0: 8 ports detected [ 278.522455][ T8140] usb 1-1: new high-speed USB device number 2 using dummy_hcd 10:23:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:09 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 278.705479][T12536] hub 9-0:1.0: USB hub found [ 278.713577][T12536] hub 9-0:1.0: 8 ports detected 10:23:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 10:23:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4008641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x40]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 278.754384][T12537] hub 9-0:1.0: USB hub found [ 278.765003][T12537] hub 9-0:1.0: 8 ports detected 10:23:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 279.083016][ T8140] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.092834][T12558] hub 9-0:1.0: USB hub found [ 279.098186][T12558] hub 9-0:1.0: 8 ports detected [ 279.100187][ T8140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.116128][ T8140] usb 1-1: Product: syz [ 279.123137][ T8140] usb 1-1: Manufacturer: syz [ 279.135642][ T8140] usb 1-1: SerialNumber: syz [ 279.159789][ T8140] usbip-host 1-1: 1-1 is not in match_busid table... skip! 10:23:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40046432, &(0x7f0000000100)=0x2e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r5) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0xfffffffffffffef8}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000030601020000006b00009d2f324e00000026a7e641c78d0e"], 0x1c}}, 0x0) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) dup3(r7, r1, 0x0) 10:23:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) dup2(r0, r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) 10:23:12 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:12 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x6364, 0x0) 10:23:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5501, 0x0) [ 281.213817][ T12] usb 1-1: USB disconnect, device number 2 [ 281.296248][T12583] hub 9-0:1.0: USB hub found [ 281.307154][T12583] hub 9-0:1.0: 8 ports detected [ 281.353005][T12586] hub 9-0:1.0: USB hub found 10:23:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) write$binfmt_elf32(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x4a, 0x74, 0xde, 0x3, 0x3e, 0x100, 0x359, 0x34, 0xd5, 0x1, 0x3, 0x20, 0x2, 0x0, 0x6, 0xb167}, [{0x2, 0x5, 0x20, 0x0, 0x200, 0x561, 0x9, 0x5}], "68ddb5f44e77b28443150941f82ee8e076421b3bd6997769f8c7a8d05377daadd1d9da5c6f73d42c7dfaeaacd3de6f5d51cfa08d8e269137ab06091bdb616d617202dc089be6c451fa976616476569cb139a5514714bf6459ddc5d67ae246d3f84930ce6a0ffbbcf892c8cd257f5db919c9c5de8ac88f0f4f5de71bc27d33d0ae4a8ab167c42bb71c88fe9f8d03f31ba61b49752ba20b661544ad746fe8459d1a2c384af3968a740ae73b5a8f59fa36af74271b833d457df3b60699527c1c48367138eb7862dcf9f29534eaae731c4c9e69326282fd898ef32d893", [[], [], [], [], []]}, 0x62f) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 281.373692][T12586] hub 9-0:1.0: 8 ports detected [ 281.398010][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:12 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:12 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 281.486633][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:12 executing program 0: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000280)={{0x1, 0x1, 0x4153, 0x6, 0x10000, 0x6}, 0xb3, [0x9a, 0x0, 0xcb50735, 0x401, 0x40, 0x20, 0x7, 0x12, 0xfffffe00, 0x2, 0x72, 0x47, 0x9, 0x8001, 0x10000, 0x6, 0x1ff, 0x1000, 0xfffffffd, 0x4, 0x9, 0x4, 0x32e, 0x3, 0x0, 0xfffffffa, 0xffffffc4, 0xfff, 0x3, 0x8000, 0x2, 0x1, 0x6, 0x5, 0xb45, 0x81, 0x6, 0x1, 0x4, 0x1, 0x3, 0x2, 0xfe, 0x2, 0x2, 0x3, 0x2, 0xd4, 0x3, 0xe4, 0x5, 0x5, 0x6, 0x1ff, 0x3ff, 0x1, 0x100, 0x100, 0xb961, 0x10001, 0x5, 0xfff, 0x5, 0xfffff800, 0x192c, 0x800, 0x7, 0x80000001, 0x0, 0x41a2, 0x2, 0x1, 0x6649, 0x101, 0x7f, 0x7, 0x9, 0xba, 0x57, 0x0, 0x8, 0x3, 0x473c, 0x8, 0x8, 0x7, 0x2d, 0x0, 0x43, 0xff, 0x8, 0x9, 0xfffffff9, 0x7259, 0xffffffff, 0xff, 0x6, 0xf800000, 0xb9df, 0x2, 0x9f74, 0x401, 0x2, 0x4, 0x101, 0x80000001, 0x5, 0xe75b, 0xfffffc18, 0x0, 0x52, 0x800, 0x83, 0x6c, 0x4987c6d5, 0x100, 0x58, 0x4, 0x0, 0xfb7, 0x7, 0xd3, 0xfffff1ca, 0x87f, 0x401, 0x1000, 0x5f4, 0x3, 0x81, 0xffff8000, 0x1, 0x7, 0xfffffff8, 0x7fffffff, 0xffffffff, 0x15de6b5f, 0x7d, 0x2, 0x9, 0x5, 0x7, 0x1000, 0x20, 0x81, 0x3, 0x3f, 0x1ff, 0x74, 0xfffffff7, 0x20, 0x7ff, 0x1, 0x1, 0x80, 0x98, 0x6, 0x2, 0xade, 0x5, 0x1000, 0x40, 0x7, 0x37, 0x4, 0x0, 0x9, 0xffffffe0, 0x10b, 0x100, 0x6, 0xeb5, 0x8, 0x9, 0x0, 0x9, 0x4, 0x9, 0x7ff, 0x7683351f, 0xff, 0x5, 0xb9da, 0x5, 0x6799, 0x7, 0x20, 0x6, 0x7, 0x100, 0xfffffc01, 0x8001, 0x5, 0x10001, 0x8000, 0xfffffff8, 0x1, 0x4, 0xb22, 0x0, 0x9, 0x3, 0x1, 0xc64, 0x8, 0x3f, 0x5, 0x2, 0x6f, 0x2f, 0x8, 0x4, 0xffff, 0x9000000, 0xbfdb, 0x101, 0x5, 0x7fffffff, 0x9a82, 0x1f, 0x3, 0x5, 0x4, 0x4, 0x26b, 0x100, 0x3ff, 0x204, 0x1, 0x9, 0x8001, 0x80000001, 0x7, 0x8, 0x2, 0x9, 0x317e, 0xc3b, 0x10001, 0x7, 0x7, 0x9, 0x1f, 0x9, 0xffff, 0x6, 0x1, 0x6, 0x5, 0x8000, 0x100, 0xe6, 0x8000, 0x5, 0x3, 0x8, 0x4, 0x4, 0x3ee5, 0xffffffff, 0x1, 0x6, 0xfffffffa, 0xff, 0x884, 0x1, 0x7, 0x0, 0x9, 0x8, 0x10000, 0xfffff52e, 0x3f, 0x230, 0x8, 0x9, 0x6, 0x5, 0x7, 0x440d, 0x4d7, 0x7f, 0x7, 0x0, 0x8000, 0x80000000, 0x51b, 0x9, 0x1, 0x1, 0x1, 0x8, 0x3, 0xffff0001, 0x10001, 0x5, 0x4, 0x1, 0xff, 0x6, 0xffff, 0x1, 0x6, 0x6d7, 0x9, 0x79, 0x8, 0x1, 0xffff, 0x2, 0x9, 0xbe, 0xc0, 0x1, 0x8001, 0x9, 0x8e, 0x2, 0x2, 0x7, 0x20, 0x0, 0x3f, 0x1, 0x2, 0x401, 0x0, 0xfff, 0x401, 0x9, 0x8, 0x1, 0x3, 0x20, 0xd4, 0x200, 0x1, 0x25b1, 0x10c, 0x5, 0x0, 0x6ae2, 0x3, 0x9, 0x3ff, 0xffffffff, 0x1d7058bd, 0x50750726, 0x1ba, 0x4, 0x20, 0x3, 0x7f, 0x101, 0x5, 0x0, 0x40a, 0x1, 0x5, 0x8, 0xfab, 0x7, 0x2, 0x0, 0x4, 0x3407, 0x40, 0x1f, 0x6, 0x3, 0x80, 0x2, 0x4, 0x6, 0x8, 0x7fffffff, 0x6, 0xe9, 0x1, 0x80000000, 0x7, 0x7ff, 0x5, 0x7, 0xffffffe7, 0x3, 0x6, 0x5501, 0x2, 0x3, 0x4, 0x800, 0x1, 0x1, 0x0, 0x5, 0x3, 0x7c49, 0x3f, 0xb046, 0x7, 0x8, 0x6, 0x7ff, 0x0, 0x2, 0x4, 0x6, 0x0, 0x5, 0xffff, 0x0, 0x9, 0x9, 0x1, 0x20, 0x8, 0x6e36, 0x6, 0x30c, 0x2, 0x8c83, 0x1, 0x200, 0x0, 0x3f, 0x101, 0x53a, 0x3ff, 0x6, 0x6eb2d297, 0x7, 0x45f7, 0x276, 0x200, 0x7fff, 0x3, 0x3, 0x6, 0x1, 0x5c5, 0x3, 0x81, 0x2, 0x2fe, 0x1, 0x40, 0x731, 0x7, 0x7f, 0xe03, 0x80000001, 0x1, 0x143, 0x6, 0x7fff, 0x0, 0x80000000, 0x6, 0x401, 0xff, 0x8, 0xaaeb, 0x4, 0x1, 0x3, 0x10001, 0x3f, 0x2, 0xd, 0x400, 0x89, 0x4b81, 0xfffffffc, 0x968f, 0x100, 0x7b5, 0xffffffff, 0x1ff, 0xd2, 0x1f, 0xfffff000, 0x40, 0x6, 0x3, 0x3, 0x81, 0x3a, 0x6, 0x7f, 0xc4, 0x41, 0x7f, 0x5081, 0x5, 0x4, 0x3, 0x81, 0x2, 0x8, 0x5, 0x7f, 0x2, 0xe3, 0xffffffff, 0xf50c737, 0x5, 0x9, 0x9, 0x1, 0x400, 0x80000001, 0xfffffffc, 0x3, 0x5, 0x50000000, 0x100, 0xffffffa1, 0x3, 0x2, 0x401, 0x3, 0x7, 0x80000001, 0x0, 0x80, 0x5, 0xfffffbff, 0x9, 0x0, 0x4, 0x3, 0x2, 0x401, 0x4, 0x4f4b, 0x7fffffff, 0x1ff, 0xca, 0x2, 0x80000001, 0x1, 0x3fffc, 0xc7, 0x4, 0x556, 0x2, 0x9, 0xb3a0, 0x3f, 0xe, 0x0, 0x1, 0x8, 0x10000, 0xffff, 0x1, 0x6, 0x4, 0x9, 0x7, 0x9, 0x8, 0x9, 0x6, 0x9, 0x3ff, 0x8, 0x40, 0xeb70, 0x8, 0x3, 0x8, 0x7, 0x1384, 0xffffffff, 0x3, 0x7, 0x2, 0x9, 0x2, 0x401, 0x4, 0x7fffffff, 0x1, 0x2, 0xff, 0x8, 0x1ff, 0xe2e, 0x7e0, 0x8, 0x1, 0x1, 0x80000000, 0x6, 0x1ab0, 0x4, 0x80, 0x9, 0x1f, 0x1, 0x5, 0x8f, 0x9fb9, 0x3, 0x4, 0x7, 0x9, 0x5, 0xe5, 0x5, 0x2, 0x0, 0x5000, 0x5, 0x5, 0x7fffffff, 0x101, 0x6, 0xff, 0x1, 0x1f, 0x5, 0x5, 0x268e, 0xfff, 0x1, 0x10000, 0x0, 0x7, 0x2d1, 0x80000001, 0x3, 0xdcf, 0x8, 0x72a18cdc, 0x9, 0x9, 0x34a5c4e8, 0x7, 0xaa, 0x8, 0x7, 0xef589256, 0x8, 0x4, 0x6, 0x8, 0x1, 0xffffffc6, 0x8e47, 0x10001, 0x7, 0x6, 0x6232, 0x8000, 0x3, 0xffffffff, 0x10, 0xb811, 0x2986, 0x0, 0xc9a, 0x10001, 0x1, 0x9968, 0x6, 0x6, 0x8, 0x6, 0x9, 0x88f, 0x0, 0x7, 0x2, 0x8, 0x4, 0x400, 0x0, 0x7ff, 0x4, 0x2, 0x6, 0x3, 0x7f, 0x1ff, 0xfffffffe, 0x40, 0xfffffff8, 0x1, 0x1, 0x9, 0x459a3c11, 0x2, 0x9, 0x43, 0x80000000, 0x1f, 0x2, 0x200, 0x5, 0x8, 0x257c, 0x5, 0x43b2, 0x1ff, 0x7fffffff, 0x1, 0x6, 0x2, 0x0, 0x8000, 0x4, 0xe1, 0x9, 0x0, 0x8, 0x6, 0x1, 0x0, 0x4, 0x101, 0xffffffc1, 0x3ff, 0x0, 0x1ff, 0xa7f, 0xbd, 0x2, 0x5, 0x7f, 0x1000, 0x295, 0x8001, 0x1, 0x1, 0x100, 0x6, 0x401, 0x7337, 0xfffffffe, 0x62f, 0x4, 0x6, 0x1f, 0x3, 0x8, 0x9, 0x40, 0x8000, 0x5, 0x8, 0x0, 0x2a, 0x9, 0x3e, 0x0, 0x3, 0x8001, 0x10001, 0x6, 0x3c, 0x8000, 0x19d0, 0x2, 0xfffffff9, 0xfffffff8, 0x83, 0x5, 0x2, 0x4, 0x528, 0x3, 0x6, 0x4, 0x3, 0x800, 0x95, 0x7fffffff, 0x0, 0x2, 0x8, 0x1, 0x1, 0x7, 0x3, 0x400, 0x7, 0xfffffffe, 0x401, 0x3f, 0xf22, 0x8, 0xa376, 0x6, 0x401, 0x10001, 0x4, 0x6, 0x7, 0x6, 0x7f, 0x3, 0x6, 0xba, 0xf24, 0x8, 0x14, 0x32f, 0x3, 0x2, 0x10, 0x6, 0x7f, 0x1f, 0xfffff7d6, 0x3, 0x0, 0xc0000000, 0x101, 0x1, 0x18, 0x9a96, 0x17, 0x401, 0x0, 0x3, 0x4, 0xa76b, 0x1ff, 0x4, 0xfff, 0xac91, 0x80000001, 0x25, 0x10000, 0x8, 0xca4, 0x80, 0x0, 0x4, 0x8, 0x37, 0x48, 0x4, 0x20, 0x9, 0x86, 0x3f, 0x8, 0x1, 0x10000, 0x9ece, 0x7e, 0xdc2, 0x0, 0x6, 0x5656, 0x90, 0xff, 0x7, 0xbeb, 0x33, 0x904f, 0x7, 0x81, 0xc, 0x0, 0x5, 0x42, 0x8, 0x9b, 0x23d0, 0xc8a, 0x401, 0x9, 0x0, 0x3, 0x1, 0xffff, 0x3, 0x5, 0x1, 0xffffff18, 0x9, 0x81, 0x65, 0x2, 0x7, 0x4, 0x8, 0xfff, 0xffffff94, 0xeaa721d, 0x4, 0xffffffff, 0x7, 0x0, 0x4, 0x50000000, 0x2, 0x0, 0xffffd5cd, 0x6, 0x5, 0xfffffff8, 0x9, 0x0, 0x7f, 0x4, 0x33, 0x9, 0xcc9, 0x2b, 0x6, 0x7, 0x4, 0x80000001, 0x8001, 0x6, 0x40, 0xffff, 0x3d87, 0x7, 0x9d79, 0x1f, 0x0, 0x8, 0x1, 0x7f, 0x0, 0x1, 0x6dab, 0x8, 0x3, 0x25, 0x7, 0x7ff, 0x4, 0x9, 0x20, 0x200, 0x0, 0x3, 0x0, 0xc4, 0x400, 0x0, 0x0, 0x40, 0x6, 0x4, 0x3, 0x81, 0x8, 0x7, 0x8, 0x5, 0x9, 0x7, 0x80000001, 0x6b, 0xb24, 0x45f, 0xfff, 0x6, 0x12bd, 0x1, 0x7, 0x7, 0xe9e, 0x62, 0x9, 0x0, 0x3f, 0x9, 0x2, 0x6, 0x3, 0x9, 0xfffffffa, 0x79, 0x4, 0xffff, 0x80000000, 0x9, 0x100, 0x7f, 0x7, 0x3ff, 0x6b0, 0x9, 0xb8, 0x0, 0xc6, 0xff, 0x3949, 0x4, 0x953, 0x2, 0x5, 0x1, 0x8, 0xe20, 0xbc, 0x2, 0x327e, 0xff000000, 0x1, 0x7b44, 0x4, 0x80, 0x0, 0x3ff, 0x3780000, 0x1, 0x7, 0x7, 0x1, 0x3, 0x81, 0x2]}) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x103382) r7 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r7, &(0x7f0000000540)=[{}, {&(0x7f0000000280)="d19344", 0x3}, {0x0}], 0x3, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x24002d00) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) dup3(r2, r4, 0x0) [ 281.648183][T12608] hub 9-0:1.0: USB hub found [ 281.664538][T12608] hub 9-0:1.0: 8 ports detected 10:23:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x8080) dup3(r2, r3, 0x0) 10:23:12 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:12 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 281.946121][T12631] hub 9-0:1.0: USB hub found [ 281.952635][T12631] hub 9-0:1.0: 8 ports detected 10:23:12 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:12 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x890b, 0x0) 10:23:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x5509, 0x0) 10:23:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000280)={0x3, @raw_data="1e45d79fde6daee5aa231de902dbf3f5ff33ce60b3e11d8ef62f49f106d712e4214e6a29cde62860ba660f81c28ae24a6f225c18625f2d7e3228a46da17da58f5de88b9b5e15ddedbea29b18f50be26862173c4b5709312528522defc0a72fe897019aa571fdb988386f8067675671513538187977a4fc28029e66c951e20cfed347b6e74b2f0fc313c33686e446e17f13da9e1711911c50f0eba7acfb63ea20885f0192f4ef5bc3c1e68d14f89316205548bd9df056a07faff27d9c44a28eb03caf872e25fe6beb"}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r5, 0x0) 10:23:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f00000000c0)) dup3(r2, r3, 0x0) [ 282.103976][T12646] hub 9-0:1.0: USB hub found [ 282.110936][T12646] hub 9-0:1.0: 8 ports detected 10:23:13 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 282.239535][T12650] hub 9-0:1.0: USB hub found [ 282.244934][T12650] hub 9-0:1.0: 8 ports detected 10:23:13 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 282.432928][T12671] hub 9-0:1.0: USB hub found [ 282.447406][T12671] hub 9-0:1.0: 8 ports detected 10:23:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r3, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r4, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x3fb, 0x4, 0x70bd2d, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x400c840) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r5, 0x0) 10:23:13 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:13 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xffff, 0x40, 0x1, 0xcef}, {0xec, 0x6, 0x4, 0x800}, {0x200, 0x9, 0x1, 0x3}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x86e3, 0x5, 0xe1}, {0x7, 0x9f, 0x20, 0x3}, {0x81, 0x20, 0x40, 0x4}]}) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x800) dup3(r2, r5, 0x80000) [ 282.863418][T12694] hub 9-0:1.0: USB hub found [ 282.876292][T12694] hub 9-0:1.0: 8 ports detected 10:23:13 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:13 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x8912, 0x0) 10:23:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) [ 283.139311][T12708] hub 9-0:1.0: USB hub found [ 283.157556][T12708] hub 9-0:1.0: 8 ports detected [ 283.216056][T12713] hub 9-0:1.0: USB hub found [ 283.226070][T12713] hub 9-0:1.0: 8 ports detected 10:23:14 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:14 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 283.478226][T12728] hub 9-0:1.0: USB hub found [ 283.500179][T12728] hub 9-0:1.0: 8 ports detected [ 283.557610][T12730] hub 9-0:1.0: USB hub found [ 283.566697][T12730] hub 9-0:1.0: 8 ports detected 10:23:14 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:14 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:14 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8000071d2f6c5, 0x10, 0x1, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$char_raw(r0, &(0x7f0000000600)={"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"}, 0x5c00) open$dir(&(0x7f0000000280)='./file0\x00', 0x402, 0x122) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$CHAR_RAW_RRPART(r2, 0x125f, 0x0) [ 283.889070][T12747] hub 9-0:1.0: USB hub found [ 283.912889][T12747] hub 9-0:1.0: 8 ports detected 10:23:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x6364, 0x0) 10:23:14 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x8933, 0x0) 10:23:14 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 284.179784][T12764] hub 9-0:1.0: USB hub found [ 284.213473][T12764] hub 9-0:1.0: 8 ports detected 10:23:15 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:15 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 284.432522][T12780] hub 9-0:1.0: USB hub found [ 284.448860][T12780] hub 9-0:1.0: 8 ports detected 10:23:15 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:15 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) [ 284.675285][T12789] hub 9-0:1.0: USB hub found [ 284.697312][T12789] hub 9-0:1.0: 8 ports detected 10:23:15 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:15 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x8912, 0x0) 10:23:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x400448c9, 0x0) [ 285.058030][T12811] hub 9-0:1.0: USB hub found [ 285.075952][T12811] hub 9-0:1.0: 8 ports detected 10:23:15 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:16 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40046f41, &(0x7f0000000080)={r8, 0x7000002}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9, 0x80000}) pselect6(0x40, &(0x7f0000000080)={0x1, 0x52d, 0x4ed0, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0xb6f1}, &(0x7f00000000c0)={0x6, 0x4d73, 0x1ff, 0x7, 0x91, 0x1, 0x1, 0x8d}, &(0x7f0000000100)={0x6, 0x2, 0x4, 0x6deac22f, 0x10001, 0x0, 0x8, 0x800}, &(0x7f0000000180), &(0x7f0000000280)={&(0x7f00000001c0)={[0xab, 0x7fff]}, 0x8}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 285.322713][T12824] hub 9-0:1.0: USB hub found [ 285.345314][T12824] hub 9-0:1.0: 8 ports detected 10:23:16 executing program 1: pipe2$9p(&(0x7f0000000080), 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000100)=0x2) dup3(r2, r3, 0x0) 10:23:16 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:16 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @dev={[], 0x33}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) [ 285.687321][T12842] hub 9-0:1.0: USB hub found [ 285.706655][T12842] hub 9-0:1.0: 8 ports detected 10:23:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x400448dd, 0x0) 10:23:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x8933, 0x0) 10:23:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x141200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r5 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1, 0x22080) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000100)=""/162) recvmsg$can_bcm(r2, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/44, 0x2c}], 0x5, &(0x7f0000000880)=""/115, 0x73}, 0x40000001) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="94000000303c70213f150714f54b20252b40788e9885359d6e73735cbc75801dff2b24da7efc5877c944aa7e8d9da4f5e3aad2c664", @ANYRES16=0x0, @ANYBLOB="20002dbe7000ffdbdf258d0034234cf78c99f49ff2763fd9731c0000040007805800048013000100e2726f6164020000002de1525f001300210062726f6164636173742d6c696e6b0c002c000780080002000000000008000300ff000000080003000700000008000400ffffffff0800020004006cc13d6a07800c000300010000000000000008000100070000000c00030006000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x44000801}, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) kexec_load(0x6, 0x4, &(0x7f0000000440)=[{&(0x7f0000000280)="cd347ec20a745afc0bd5a352105fa3bc947f51095dba5cf8d59303c664ab8752329fc4465f6c1fd99693473d94e10eff0f2c9bc722c13c411ba7683349e34515a6dbf5d19296f06d6f7294d510f5c48b1b95f6065639ea0e66208dcabcfa11eff802c570d4d93b2af02fcbfe67b01cdd182ae9280821290597c03c2565f22d5e77a8eaacf4cfe43a307f56796c9aca19e3b4bdaf73af337b1ebfd5da46018dce5e62c39dcfc4f36401d60d518dea15979a10f5740074fac436cd69e09d4d6b1d82bef418d4aad526e27621b559c48915880ffea38e8b217a1c6b3fb6667bcb559bf407e1b06c19df5c32e2", 0xeb, 0xffffffff, 0xa31a15}, {&(0x7f00000001c0)="8ff9fc6625f2663cf8d3c3cc396e79cc", 0x10, 0x9, 0x4}, {&(0x7f0000000380)="7b36f2c3c360bdc77538df913ac29054", 0x10, 0x40, 0x65}, {&(0x7f00000003c0)="e4c87a4a512657a8c77d1aafb10ae9ac9372c7f8cd6792c03c122dcc297d8a7601216552d8d54af6277e7528d4ead50422dcf328ad6d52850896d90dbcb99bb4169df4327c0fb097675bfed7026a033673f01ce3548a2e5eb5e17fae8a693ab76b0b678267d3", 0x66, 0x4, 0x7}], 0x80000) dup3(r2, r3, 0x0) 10:23:16 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 10:23:16 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 286.020110][T12867] hub 9-0:1.0: USB hub found [ 286.036381][T12867] hub 9-0:1.0: 8 ports detected [ 286.093062][T12869] hub 9-0:1.0: USB hub found [ 286.112814][T12869] hub 9-0:1.0: 8 ports detected 10:23:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:17 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 10:23:17 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r5 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) [ 286.346912][T12886] hub 9-0:1.0: USB hub found [ 286.351958][T12886] hub 9-0:1.0: 8 ports detected 10:23:17 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) [ 286.487268][T12893] hub 9-0:1.0: USB hub found [ 286.510407][T12893] hub 9-0:1.0: 8 ports detected 10:23:17 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x400448c9, 0x0) 10:23:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x400454ca, 0x0) [ 286.953087][T12913] hub 9-0:1.0: USB hub found [ 286.970724][T12913] hub 9-0:1.0: 8 ports detected 10:23:17 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 10:23:17 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 287.169894][T12924] hub 9-0:1.0: USB hub found [ 287.188529][T12924] hub 9-0:1.0: 8 ports detected 10:23:18 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:18 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 10:23:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) openat$vsock(0xffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x6) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x80, 0x40000) dup3(r2, r3, 0x0) [ 287.419688][T12936] hub 9-0:1.0: USB hub found [ 287.437310][T12936] hub 9-0:1.0: 8 ports detected 10:23:18 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:18 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) r3 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) r5 = signalfd4(r2, &(0x7f00000002c0)={[0xffff, 0x7]}, 0x8, 0x180800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1c) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) dup3(r0, r1, 0x0) 10:23:18 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) [ 287.638103][T12950] hub 9-0:1.0: USB hub found [ 287.654716][T12950] hub 9-0:1.0: 8 ports detected 10:23:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x400448dd, 0x0) 10:23:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40045506, 0x0) [ 287.769952][T12958] hub 9-0:1.0: USB hub found [ 287.807161][T12958] hub 9-0:1.0: 8 ports detected 10:23:18 executing program 1: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="7f000d0240000000090000000341fab436089947c4646b6365153f0340bf36a1a54a01fb8532a6689e7ad935fdb8aaa31d8a85e47aae5ec986e4a7000000000000562cc7ec0222b53f3f7e5b5a6842b41de4175d818407250d88eb9f18b486ca10640fecd641493157c1deb5d82e3833dcc363946b6f0600000000000000ca417ce60cb5b3cc8cab64f501b3b3784803a55dd6815238d0cc403a3e7d895f021dce7a6424373066e1fff82afa3b8c7e6fae7415dd7475842f3f0c87be2be6"]) r2 = dup(r1) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000080)={0x19, 0x1}) recvmmsg(r2, &(0x7f0000005180)=[{{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000540)=""/82, 0x52}], 0x2, &(0x7f0000000600)=""/231, 0xe7}, 0xdd17}, {{&(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f0000000a40)=""/176, 0xb0}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/201, 0xc9}, {&(0x7f0000001c00)=""/189, 0xbd}], 0x7, &(0x7f0000001d00)=""/143, 0x8f}, 0x7f}, {{&(0x7f0000001dc0)=@qipcrtr, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/158, 0x9e}, {&(0x7f0000001f00)=""/108, 0x6c}, {&(0x7f0000001f80)=""/63, 0x3f}, {&(0x7f0000001fc0)=""/141, 0x8d}, {&(0x7f0000002080)=""/75, 0x4b}], 0x5, &(0x7f0000002140)=""/222, 0xde}, 0x1}, {{&(0x7f0000002240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000022c0)}, 0x1}, {{&(0x7f0000002300)=@ipx, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/107, 0x6b}, {&(0x7f0000002400)}], 0x2, &(0x7f0000002480)=""/213, 0xd5}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002580)=""/27, 0x1b}, {&(0x7f00000025c0)=""/59, 0x3b}, {&(0x7f0000002600)=""/79, 0x4f}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x4, &(0x7f00000036c0)=""/204, 0xcc}, 0x43a}, {{&(0x7f00000037c0), 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003840)=""/86, 0x56}, {&(0x7f00000038c0)=""/136, 0x88}, {&(0x7f0000003980)=""/82, 0x52}, {&(0x7f0000003a00)=""/29, 0x1d}, {&(0x7f0000003a40)=""/116, 0x74}, {&(0x7f0000003ac0)=""/189, 0xbd}, {&(0x7f0000003b80)=""/38, 0x26}], 0x7, &(0x7f0000003c00)=""/214, 0xd6}, 0x7fffffff}, {{&(0x7f0000003d00)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000005040)=[{&(0x7f0000003d80)=""/9, 0x9}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)}, {&(0x7f0000004e00)=""/70, 0x46}, {&(0x7f0000004e80)=""/179, 0xb3}, {&(0x7f0000004f40)=""/252, 0xfc}], 0x6, &(0x7f0000005080)=""/246, 0xf6}, 0x1}], 0x8, 0x2002, &(0x7f0000005280)={0x77359400}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000022c0)='/dev/vcsu#\x00', 0x3, 0x400) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x404c004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:18 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:18 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x328, 0x13, 0x300, 0x70bd27, 0x25dfdbfd, {0xf, 0x1, 0x1, 0x8, {0x4e22, 0x4e20, [0x7ff, 0x8, 0x6, 0x1], [0x3, 0x9, 0x0, 0x4], 0x0, [0x3, 0x6]}, 0x3, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "faff6b2277fa235d500510f42933f2aed392abbd810c0b7050c430b8ee906a0964aa77b78dcc2e2c3ff39c6ff9550604d9efb0bde982bd94760b8c71cdc830368f29c03fc4aa3a7d0416d5028f064cbf8d5dc28b7298c467d47c336c31c94e43f45b4171c74a1c4406df8005ba45d19d44b87a188e2e30c5935e5fde25c8c4f02e97fa105482748bf9565d979390035b063fa68d02a9959051151614cead1cf4769db7e34b565b56501bc9fa878f5bc0c4e11d91a74105"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "a735c46894a6910ce284d7ae98be78867f429a4b469cee738cfb7f26860625bfce496f"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "f33d7fa76b40739c82281f9992ab29752e1aeb341d65535e455953cf897bc7297180629e8938d448acc036f119d108c66e90eaca92e925f58e038033ed9d9678d909d777b2bc567851eaaa57b5dd03bda94c0332fa2a10671386e92155f15edb7d9d089c5e69efac1be4771a2c601c035f15cc0fd49f82c739bee82a965de94b8d022f4ca7ddb6fd3611211d62dcd761e2bba52f84fe022be317738b80e7ed278fee88c2b21b3b2f429861ff876e923186d4bfca787fa73a69835da0b7ccd43e160fd7046c78b3bedbffd9569d796886f9bffb5bcf2ce56d442ce2b82a5cbaf211687f643b7a7e9dc0c4f398"}]}, 0x328}, 0x1, 0x0, 0x0, 0x8000009}, 0xc041) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 288.210526][T12978] hub 9-0:1.0: USB hub found [ 288.236644][T12978] hub 9-0:1.0: 8 ports detected [ 288.307235][T12981] hub 9-0:1.0: USB hub found [ 288.338425][T12981] hub 9-0:1.0: 8 ports detected 10:23:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) setsockopt$inet_udp_int(r2, 0x11, 0x3, &(0x7f0000000080)=0x8001, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:19 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:19 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550a, 0x0) 10:23:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x400454ca, 0x0) [ 288.689215][T13003] hub 9-0:1.0: USB hub found 10:23:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) [ 288.716070][T13003] hub 9-0:1.0: 8 ports detected 10:23:19 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:19 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x30, 0x4, 0x2, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 288.988398][T13023] hub 9-0:1.0: USB hub found [ 289.013948][T13023] hub 9-0:1.0: 8 ports detected 10:23:20 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:20 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) close(r1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0xf81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x9}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000080)={r7}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x2) dup3(r5, r6, 0x0) [ 289.348381][T13040] hub 9-0:1.0: USB hub found [ 289.364845][T13040] hub 9-0:1.0: 8 ports detected 10:23:20 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:20 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550d, 0x0) 10:23:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40045506, 0x0) 10:23:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, 0xffffffffffffffff}) chroot(&(0x7f0000000080)='./file0\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x1, 0x7, 0x4, 0x0, 0x8}) clone3(&(0x7f0000000380)={0x1284480, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)=0x0, {0x3d}, &(0x7f0000000280)=""/181, 0xb5, &(0x7f00000001c0)=""/14, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6, {r2}}, 0x58) capget(&(0x7f0000000400)={0x20080522, r6}, &(0x7f0000000440)={0x401, 0x840, 0x454, 0x9, 0x1cc8, 0x8}) [ 289.647618][T13056] hub 9-0:1.0: USB hub found [ 289.685788][T13056] hub 9-0:1.0: 8 ports detected 10:23:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = openat$uinput(0xffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"b02ce146b1d06b982180b474165971c5", r6, 0x0, {}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000680)={{}, r6, 0x2, @inherit={0x68, &(0x7f00000000c0)={0x0, 0x4, 0xfff, 0x800, {0x15, 0x5, 0x1, 0x5, 0x80}, [0x80000000, 0x6, 0x3, 0x7]}}, @devid=r7}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:20 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:20 executing program 0: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000080)={0xffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:20 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 290.047258][T13086] hub 9-0:1.0: USB hub found [ 290.057689][T13086] hub 9-0:1.0: 8 ports detected 10:23:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007000000a46f9510b2b06464206a4044b70c77f17a28c86d8b13908a850c4761c651faa3aa2469829dc2f0503f893cdc9fb59d"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000001c0)={0x9f2, 0x5, &(0x7f0000000080)=[0x400, 0x1f, 0x200, 0x6df8, 0x2], &(0x7f00000000c0)=[0x5, 0x0, 0x1b4, 0x20, 0x3], &(0x7f0000000100)=[0xb4, 0xa739], &(0x7f0000000180)=[0xa1, 0x80]}) dup3(r4, r5, 0x0) 10:23:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fff, 0x10000) r4 = openat$zero(0xffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)={0x2, r4}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r5, 0x0) 10:23:20 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:21 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 290.281508][T13104] hub 9-0:1.0: USB hub found [ 290.287555][T13104] hub 9-0:1.0: 8 ports detected [ 290.336119][T13106] hub 9-0:1.0: USB hub found [ 290.355587][T13106] hub 9-0:1.0: 8 ports detected 10:23:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550e, 0x0) 10:23:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) openat$btrfs_control(0xffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xa0000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:21 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550a, 0x0) 10:23:21 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) openat$sndseq(0xffffff9c, &(0x7f0000000340)='/dev/snd/seq\x00', 0x200) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x100) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x37}, 0x10000}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000100)="b1", 0x1}, {&(0x7f0000000180)="a62bfc2da03fa129f1d6475712732f0c60eb9fa2139751f6ae4c25771b73ec5f818790deac77d0f58be9ba9b04520ea67881b145a15e8920", 0x38}, {&(0x7f00000001c0)="4622c0d27126d3b742fe1210d421446a60", 0x11}], 0x3, &(0x7f00000002c0)=[@rthdrdstopts={{0x2c, 0x29, 0x37, {0x16, 0x2, [], [@ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @local}]}}}], 0x2c}, 0x8000) [ 290.614990][T13127] hub 9-0:1.0: USB hub found [ 290.639753][T13127] hub 9-0:1.0: 8 ports detected [ 290.686052][T13131] hub 9-0:1.0: USB hub found [ 290.699827][T13131] hub 9-0:1.0: 8 ports detected 10:23:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r4, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={r5, 0x0, r6, 0x6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) read$char_raw(r2, &(0x7f0000000400)={""/49213}, 0xc200) dup3(r2, r3, 0x0) 10:23:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:21 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:21 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0x0, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000080)) dup3(r2, r3, 0x0) [ 291.016610][T13159] hub 9-0:1.0: USB hub found [ 291.028367][T13159] hub 9-0:1.0: 8 ports detected 10:23:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0xa, &(0x7f0000000080)=[{0x6, 0x1}, {0x6}, {0x1923, 0x7ff}, {0x8, 0x81}, {0x800, 0xbf}, {0x8, 0x7}, {0x2, 0x8a8}, {0xfff7, 0x7fff}, {0x6, 0x9}, {0x1, 0x7}]}) r6 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x67, 0x5, 0x8, 0xf9, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0xff, 0x8, 0x4d}, 0xe) [ 291.118596][T13160] hub 9-0:1.0: USB hub found [ 291.147735][T13160] hub 9-0:1.0: 8 ports detected 10:23:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550f, 0x0) 10:23:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = getpid() ptrace(0x4206, r4) rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f0000000000)={0x2b, 0x0, 0xffffbfffffffc58e}) capget(&(0x7f00000002c0)={0x20080522, r4}, &(0x7f0000000300)={0x151f, 0x6, 0x81, 0x81, 0x8, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r3, 0x1314}, {r1, 0x150}], 0x2, &(0x7f0000000180)={r6, r7+60000000}, &(0x7f0000000280)={[0x800, 0xb]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg2\x00'}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x37}, 0x1b}) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f0000000080)=0x7) 10:23:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x4, 0x9, 0xc, 0x5, 0x7026}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:22 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x0, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550d, 0x0) 10:23:22 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 291.515073][T13187] hub 9-0:1.0: USB hub found [ 291.526093][T13187] hub 9-0:1.0: 8 ports detected [ 291.610245][T13193] hub 9-0:1.0: USB hub found [ 291.633385][T13193] hub 9-0:1.0: 8 ports detected 10:23:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) r8 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0xa40, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000280)={{r8}, "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"}) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x0, r7}) 10:23:22 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x0, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:22 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = dup3(r2, r3, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000080)=0x1) [ 291.945426][T13218] hub 9-0:1.0: USB hub found [ 291.963800][T13218] hub 9-0:1.0: 8 ports detected 10:23:22 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x0, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:22 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x0, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 292.255959][T13236] hub 9-0:1.0: USB hub found [ 292.260993][T13236] hub 9-0:1.0: 8 ports detected 10:23:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40049409, 0x0) 10:23:23 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000080)={0x5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) 10:23:23 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x0, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550e, 0x0) 10:23:23 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x0, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = getpid() r6 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000000c0)={0x2, 0xffffffff, 0xffff50fd, 0x1, 0x6, 0x9}) ptrace(0x4206, r5) rt_tgsigqueueinfo(r5, r5, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffbfffffffc58e}) sched_getparam(r5, &(0x7f0000000080)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$TIOCGSERIAL(r7, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/226}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 292.446147][T13248] hub 9-0:1.0: USB hub found [ 292.466116][T13248] hub 9-0:1.0: 8 ports detected 10:23:23 executing program 1: r0 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xf81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r2, 0x1}, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2) dup3(r5, r6, 0x0) 10:23:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r6 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x109a00, 0x0) getsockopt$inet6_dccp_int(r6, 0x21, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000180)) dup3(r2, r3, 0x0) 10:23:23 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x0, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:23 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x0, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x1, 0x10010, 0xffffffffffffffff, 0x83000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0xb7, 0x20, 0x40, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0xc98, 0x101, 0x3, 0xb0}, [@acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0xc, 0x24, 0x7, 0x0, 0x1, [0x26, 0x1, 0x4]}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x1, 0x5}, @dmm={0x7, 0x24, 0x14, 0x4, 0x21}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x93, 0x20, 0x3c, 0x20, 0x1f}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x459}}, {0x7d, &(0x7f0000000300)=@string={0x7d, 0x3, "86474d704cc207061abffd8eba3d9019dc3d3001b61e55c0ff087cae3d103466da71af329681b2c09d4ea3fc4ef670013502aaf9e0a2e2fe82089774d4f16e29b31c34b5a98adde67a51873773d1df3b344d4b46e2b28bcffda9101081c0f4b37d9fb62a1e0fd320dc88d34b440ca0c4b3de9c8349fb3261872c9b"}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000280)=""/124) r4 = dup(r1) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x6040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2) dup3(r4, r5, 0x0) [ 292.809909][T13277] hub 9-0:1.0: USB hub found [ 292.816867][T13277] hub 9-0:1.0: 8 ports detected 10:23:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0) r3 = dup(r1) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) r6 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r7}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000280)={0x800, 0x640, 0x60, 0x280, 0x0, 0x8, 0x38, 0x0, {0x2, 0x81, 0x1}, {0x7fff, 0x8}, {0x8, 0x9, 0x1}, {0xb4, 0x4, 0x1}, 0x1, 0x40, 0xffff, 0x0, 0x0, 0x10000, 0x8, 0xd4fb, 0x521, 0xe, 0x101, 0x1000, 0x1, 0x0, 0x3, 0x5}) [ 292.877855][T13280] hub 9-0:1.0: USB hub found [ 292.897514][T13280] hub 9-0:1.0: 8 ports detected 10:23:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40085503, 0x0) 10:23:24 executing program 0: ioctl$sock_ifreq(0xffffffffffffffff, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a746e6c32000c00100000000008", @ANYRES32=0x0, @ANYBLOB="8000004000000009000000014b0200ec006600003f2d9078ac1414bbac141423864f0000000002091bdfd985c784d191dadc40310607007ebb79de0510ec56dc14e5094d01847436355ff0060dbfbceea3c65c1a4ba27eb542fa9e1c673dfde73ec8e8d075442c9a430a01010000000004e000000200000009ac1414bb000100007f00000100000001ac1e010100000002440c2585ca5bd8dc789d139f831372e0000002e00000026e010101ac141444940400000717ebe00000016401010100000000ac1414bbac1e0101890002ac1e00010000000064010101ffffffffac141442ac1414aa0a0101020100"/248]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@ll={0x11, 0x9, r0, 0x1, 0x40, 0x6, @dev={[], 0x2a}}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001300)={r3, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}}, 0x24048810) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6}) r9 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xcad7, 0x2000) sendmsg$AUDIT_GET(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3e8, 0x12, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2) dup3(r6, r7, 0x0) 10:23:24 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x0, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550f, 0x0) 10:23:24 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x0, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 293.242149][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 293.306859][T13309] hub 9-0:1.0: USB hub found [ 293.317735][T13309] hub 9-0:1.0: 8 ports detected [ 293.412441][T13315] hub 9-0:1.0: USB hub found [ 293.420237][T13315] hub 9-0:1.0: 8 ports detected 10:23:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000080)='/dev/ion\x00') r3 = dup(r1) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) r6 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) close(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0xf81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r8, 0xc9, "a4730e0e98ed6d93ef2e86893395c8d0f482fda66801379dcbda4f6cea501bb38c79ac389306ecdbdd67387eb5d5487e3b2ae97b16199431fac37d67e3b8137d969b04b5d60c24ff33caddf7645ae68490265b45562bac255e3abf41d61fe8b5e6f34eedbfc9b0547c7981a239a02bfcd9be3aa795aa415c96bce4e55eab9aaf27d33c9c753beacc4c37ee065b7f6a7849736fb6b37891ebb6b3716d1810559fd6ab3ad1950a79b4f28b73148745e9f76b5babdcc30f5550117e8d0f48a3ed4b74f80fca8dc3c39df8"}, &(0x7f00000000c0)=0xd1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) 10:23:24 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x0, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:24 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x0, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 293.522406][ T5] usb 2-1: device descriptor read/64, error 18 [ 293.609292][T13330] hub 9-0:1.0: USB hub found [ 293.619640][T13330] hub 9-0:1.0: 8 ports detected 10:23:24 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800000000003, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:24 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x0, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 293.703736][T13336] hub 9-0:1.0: USB hub found [ 293.721739][T13336] hub 9-0:1.0: 8 ports detected [ 293.923690][ T5] usb 2-1: device descriptor read/64, error 18 [ 294.202172][ T5] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 294.482191][ T5] usb 2-1: device descriptor read/64, error 18 [ 294.872178][ T5] usb 2-1: device descriptor read/64, error 18 [ 294.992477][ T5] usb usb2-port1: attempt power cycle [ 295.712755][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 295.802559][ T5] usb 2-1: Invalid ep0 maxpacket: 72 10:23:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000100)={0x0, 0xfec, {}, {0xffffffffffffffff}, 0x100, 0x10001}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x770, 0x4}, {0x1c4b, 0x20}], r3}, 0x18, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r6 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0]}) dup3(r2, r4, 0x0) 10:23:26 executing program 0: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001300)={0x0, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25190000000500a20001000000050060000200000008000100030000000c009900050000000000000005006000060000000d00020048f6a6b61bf61d2fd900000008000300", @ANYRES32=0x0, @ANYBLOB="5a58a59c1cb6ff7fd09764185b04d54815d63ea919c3b578f0a7dbb398f69184b6dfb5da7d7da2a4f4bd323c9c2513fe386e8892b607e438f158e78189c9facf"], 0x58}}, 0x40004) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xd) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) r4 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x103003, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) dup3(r2, 0xffffffffffffffff, 0x0) r5 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10:23:26 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x0, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:26 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x0, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40085507, 0x0) 10:23:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40049409, 0x0) [ 295.972075][ T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 296.007657][T13377] hub 9-0:1.0: USB hub found [ 296.012806][T13377] hub 9-0:1.0: 8 ports detected 10:23:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000100)={0x1000, 0x2000, 0x43, 0x9}) r6 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000001400)={0x1d, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000024cd0e7c86700000000eaf96c87c500810fb0b07d0dc3cb830000003f5a8424f3800002000085000000350000009500000000005f1f6c3fad480b7800000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x7, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0xc, 0xffffffff, 0x6}, 0x10, 0xffffffffffffffff}, 0x74) fsetxattr$security_ima(r6, &(0x7f0000001480)='security.ima\x00', &(0x7f00000014c0)=@sha1={0x1, "03e6cad629441404d4138c3a8daa6ca6b1c6f391"}, 0x15, 0x2) r7 = socket$kcm(0x29, 0x4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) fcntl$lock(r7, 0x6, &(0x7f0000000280)={0x0, 0x3, 0x3, 0x5, r8}) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r9, 0xc018620b, &(0x7f00000002c0)={0x100000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x80000) r10 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) 10:23:26 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x0, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:26 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xc2080, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 296.290344][T13398] hub 9-0:1.0: USB hub found [ 296.295570][T13398] hub 9-0:1.0: 8 ports detected 10:23:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 296.337725][T13397] hub 9-0:1.0: USB hub found [ 296.355210][T13397] hub 9-0:1.0: 8 ports detected [ 296.462304][ T5] usb 2-1: device not accepting address 5, error -71 [ 296.470713][ T5] usb usb2-port1: unable to enumerate USB device 10:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x2a, 0x5, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x67, @empty, 0x80000000}, @in6={0xa, 0x4e21, 0x1a02, @ipv4={[], [], @local}, 0x6}, @in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x7}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0x3f, @private0, 0x4}, @in6={0xa, 0x4e20, 0x7fffffff, @empty, 0x7}, @in={0x2, 0x4e23, @multicast2}], 0xd8) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r4, 0x0) 10:23:27 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x0, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:27 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r5 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) sendto$packet(r5, &(0x7f0000000180)="415ddd37201f5c9f82ea419a8b5f49b8e2da87179fabfd6a6796e4f986e6ffa346d812917e751f9cfd82175ad55c75e1588ac87e12f7c0283ec7f2c85846578223c196494fe12aae0b7d171b1675d714b3b271a654bfe794f66dadc04c5ec5f9f989183c149ae7ede463f4affd896a83717847bbf6f1c7089429b90883", 0x7d, 0x80, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x3e, 0x6, @remote}, 0x14) [ 296.675091][T13421] hub 9-0:1.0: USB hub found [ 296.691760][T13421] hub 9-0:1.0: 8 ports detected [ 296.719314][T13423] hub 9-0:1.0: USB hub found [ 296.737300][T13423] hub 9-0:1.0: 8 ports detected 10:23:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40085503, 0x0) [ 296.770393][T13424] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 10:23:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40095505, 0x0) 10:23:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = socket(0x4, 0x1, 0x7) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001300)={r5, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000001c0)={r5, 0x1, 0x6, @local}, 0x10) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0xff, 0x2}, 0x2}, 0x18) r6 = dup(r1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000080)=0xff, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2) dup3(r6, r7, 0x0) 10:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f00000000c0)={r4, 0x80000, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a45323, &(0x7f0000000280)={{0x7}, 'port1\x00', 0x6a, 0x81428, 0x4, 0x3, 0x401, 0xfffffff8, 0x2, 0x0, 0x3, 0x4}) r7 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xfffffffe, 0x58302) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5}) dup3(r2, r3, 0x0) 10:23:27 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:27 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x0, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = dup3(r2, r3, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000080)=""/167, 0xa7, &(0x7f0000000280)=""/209, 0x2, 0x4}}, 0x48) 10:23:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x82) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 297.151496][T13459] hub 9-0:1.0: USB hub found [ 297.167260][T13459] hub 9-0:1.0: 8 ports detected 10:23:28 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x0, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup3(r5, r3, 0x0) 10:23:28 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x0, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x2, 0x2, 0x1f, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) [ 297.406318][T13476] hub 9-0:1.0: USB hub found [ 297.423681][T13476] hub 9-0:1.0: 8 ports detected [ 297.477306][T13482] hub 9-0:1.0: USB hub found [ 297.488434][T13482] hub 9-0:1.0: 8 ports detected 10:23:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40085507, 0x0) 10:23:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4018620d, 0x0) 10:23:28 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x0, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000080)=0x5, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="6db980845f526ea9b18696b3f5b3d0772719aaee35b23cb7592d775ec897b72166a552337757191bc2899ca97702cc01db907a1659b878e6bff2c814ed92a61bc40c1721b865eb08752e846e1387fa39426c8d70827a90652ead4f010ab7aa5183a977c1a599525df2ba14916c7cdbc3b12434fab95ccbc1ba587035d42905a0bea980c8d112f683b49e", 0x8a}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000000c0)="cc9aee922624375880dd70daa3d100e67175589ff03efedaf669a9b6d3ddc0b03231175cdd72857ae91e1ad24789975afe054b286821351a66aa04a93bf2db5ca5b688b618a56abf9049ad626818", 0x4e}], 0x4, &(0x7f0000002340)=[{0x10, 0x84, 0x7f, "df3d"}, {0x7c, 0x0, 0xd0df, "de73eac3e9e9884c57b73b68013ddccfd14b2f1bf257ba23299380853d3872e1ac3b5512a04df5e112684e38207ae868f2f88e8148822cf353fd77d48e502b716d6f3f6b262fd154066d7c6050e6c5174de9cb44d4714d07c7de1deae377a63c33651c7aacea5ac5d300d2fb4cdf"}, {0x38, 0x108, 0x8, "96ad6eabf934f7b53a8fa71ae51363ca6d55fab2c6832898598ee51db70c7d90d8916201f6f1bd128ff03c09"}], 0xc4}, 0x40) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f00000000c0)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:28 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 297.790314][T13506] hub 9-0:1.0: USB hub found [ 297.809858][T13506] hub 9-0:1.0: 8 ports detected 10:23:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0xc, 0x9}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000000380)={{0x2, 0x2, 0x5d, 0x400}, 0x0, [0x2, 0x358, 0x2, 0x7, 0x1, 0x0, 0x8, 0x1, 0x1, 0x3bbe, 0x0, 0x9, 0x0, 0x239, 0x0, 0x10000, 0x3ff, 0x1, 0x5, 0x1, 0x2, 0xc19, 0xc2, 0x7, 0x9, 0x0, 0x6, 0x100, 0x0, 0x6, 0x7, 0x1, 0x7, 0x5, 0x8, 0x20, 0x7, 0x3, 0x7, 0x101, 0xffffffff, 0x4, 0x8, 0x4, 0x21083555, 0x7ff, 0x9, 0x82, 0x200, 0x3, 0x8, 0x40062bc, 0x8, 0x800, 0x9, 0x9, 0x9, 0x9378, 0x5, 0x5, 0xdd, 0x181fe5e9, 0x5, 0x8f8, 0x9, 0xbd9806f0, 0xb8e, 0x7fff, 0x80, 0x4, 0x7, 0x4, 0x401, 0x9, 0x4, 0x4, 0x9, 0x1, 0x7f, 0x7, 0x20, 0x8, 0xbf, 0x75d, 0x3, 0x2, 0x95c1, 0xaa8, 0x5, 0x7, 0x8c6, 0x6, 0x1, 0x22b, 0x1b5a80, 0x1ff, 0x1, 0xd9a, 0x5, 0x42, 0x1, 0x100, 0x9, 0x5, 0x1ff, 0x3, 0x7fffffff, 0x2, 0x40, 0x1000, 0x7, 0x7f, 0x9, 0x1, 0x68e9, 0x0, 0x13d7, 0xb627, 0x8, 0x8, 0xffff9ef1, 0x90a3, 0x7fff, 0x2, 0x1, 0x2e9, 0x68]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r6 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000080)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r7 = openat$autofs(0xffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000100)={0x144, @time={0x10000, 0x2}, 0x8, {0x0, 0x64}, 0x3, 0x1, 0xff}) r8 = dup3(r2, r3, 0x0) write$vhost_msg(r4, &(0x7f0000000300)={0x1, {&(0x7f0000000280)=""/88, 0x58, &(0x7f0000000680)=""/254, 0x2, 0x3}}, 0x44) read$eventfd(r8, &(0x7f0000000780), 0x8) 10:23:28 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x0, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:28 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x7ff, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 297.979576][T13524] hub 9-0:1.0: USB hub found [ 297.992316][T13524] hub 9-0:1.0: 8 ports detected 10:23:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000080)={0x20, 0xfffffffb, 0xfffffc01, 0x7, 0x0, 0x4, 0x4}) [ 298.105599][T13534] hub 9-0:1.0: USB hub found [ 298.127795][T13534] hub 9-0:1.0: 8 ports detected 10:23:29 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 298.386955][T13551] hub 9-0:1.0: USB hub found [ 298.391884][T13551] hub 9-0:1.0: 8 ports detected 10:23:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40086602, 0x0) 10:23:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40186366, 0x0) 10:23:29 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000100)={0x4b, &(0x7f0000000080)="8a0f94dad4d1da16a69d4eb5e942434aa50dd58eaf83e0d473fca1ef625c7f0957e4e6057939042b33f4a0ebbe72e1287987cf81080adb0d7f6466ca2cd5791d2047a9e3b75129bf95053c"}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = accept4$tipc(r2, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000100)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote}}) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r4, 0x0) 10:23:29 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 298.718000][T13565] hub 9-0:1.0: USB hub found [ 298.747298][T13565] hub 9-0:1.0: 8 ports detected 10:23:29 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x0, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sysfs$2(0x2, 0x7fff, &(0x7f0000000540)=""/4096) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup3(r2, r5, 0x0) 10:23:29 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4000000003, 0x1, 0x1, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) ioctl$sock_ifreq(r4, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x80000003, 0x3f}}) syz_emit_ethernet(0x5c, &(0x7f0000000180)={@broadcast, @dev={[], 0x33}, @val={@void, {0x8100, 0x2}}, {@llc={0x4, {@snap={0x1, 0x1, "87", "2e1777", 0x8847, "4e829775443922886f6e8c61a0b4cb2317b284956ddcfc67194c777f2fb15cb86b951193f6137df6e3a2f8c83acc2fe97ca2886c35fe86b51368484b3e0622f2456b"}}}}}, &(0x7f0000000100)={0x1, 0x4, [0xc65, 0x21, 0x504, 0xb16]}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'ipvlan0\x00', 0x792}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x203, 0x0, 0x1, 0xffffffffffffffff}) r2 = dup(r1) open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4008641a, &(0x7f0000000280)={0x3, &(0x7f00000001c0)=[0xfffffffe, 0x7, 0x7]}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x4, 0x2, 0x6, 0x8], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0xdededede}) dup3(r2, r3, 0x0) [ 298.986505][T13588] hub 9-0:1.0: USB hub found [ 298.999042][T13588] hub 9-0:1.0: 8 ports detected 10:23:29 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 299.180872][T13604] hub 9-0:1.0: USB hub found [ 299.190152][T13604] hub 9-0:1.0: 8 ports detected 10:23:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40095505, 0x0) 10:23:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4020940d, 0x0) 10:23:30 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x0, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r0, 0x8, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:30 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 299.621942][T13625] hub 9-0:1.0: USB hub found [ 299.634249][T13625] hub 9-0:1.0: 8 ports detected 10:23:30 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x0, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:30 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$random(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x40000, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 299.815945][T13639] hub 9-0:1.0: USB hub found [ 299.831415][T13639] hub 9-0:1.0: 8 ports detected 10:23:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="70010000", @ANYRES16=r4, @ANYBLOB="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"/360], 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x2400c000) getsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup3(r1, r3, 0x0) [ 299.896992][T13640] hub 9-0:1.0: USB hub found [ 299.911214][T13640] hub 9-0:1.0: 8 ports detected 10:23:30 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:30 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4018620d, 0x0) [ 300.237684][T13660] hub 9-0:1.0: USB hub found [ 300.252526][T13660] hub 9-0:1.0: 8 ports detected [ 300.300757][T13661] hub 9-0:1.0: USB hub found [ 300.336663][T13661] hub 9-0:1.0: 8 ports detected 10:23:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x402c5828, 0x0) 10:23:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = socket(0x840000000002, 0x3, 0x200000000000ff) r6 = dup(r2) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) ioctl$sock_ifreq(r5, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x27b9d442a05a9e36}, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:31 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) r3 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000002c0)={{}, "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"}) ioctl$sock_ifreq(r3, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) r4 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103100) close(r4) r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0xf81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r6, 0x2, 0x20, 0x6, 0x6}, &(0x7f00000000c0)=0x18) dup3(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000280)=0x6, 0x4) 10:23:31 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:31 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) [ 300.643511][T13690] hub 9-0:1.0: USB hub found 10:23:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x8000) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000f064ce300003805000000000000000706000b000000000006000b00030000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040884}, 0x20000084) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x2000, 0x5, 0xffffffff, 0x10}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a3, &(0x7f0000000140)={'bridge0\x00', @ifru_names='nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x9b3d, 0x61, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0x3f}}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r5}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='macsec0\x00', 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) [ 300.680544][T13690] hub 9-0:1.0: 8 ports detected 10:23:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') creat(&(0x7f0000000280)='./file0\x00', 0x18d) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fbd00001a00000005060000008d0e0c88048f8ea186020a878789800104898a8781"]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x72, "0b27c4249b409920162749e39c11a60b7bdd3539fc54cbfe72edad2c60276dc0775cb6a227c94fb9890cea3c90ad285a8b201034b8b2de00931d6ecc6ff0f64ba80b7b73d6a1cf7cb8a5ed0e4391f6dd7806678231576ae9e9d90ef493f055674a09b5187b240c201cd92da9b4452cd40f83c2918d692fc6916f819774328522704f649a07241f6ec0db877eee84e0ba4d293f4b68bd6fa0b600b2a1e44db175b181aa76ba3eb709517aba98deea2f3c2a08fb601f41ee763c5a3c383d76377705095236f8c95d93ff72352f9ddcd7230c3b23a923ebb2334b62ab0d73417b4565b47f66660a2e7417bfbf9b76e2890746578de1e3a2d8cf4bd494f145462223", 0x6, 0x3, 0x18, 0x6, 0x6, 0x2, 0x5}, r7}}, 0x128) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) dup3(r3, r4, 0x0) 10:23:31 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x8001}}}, 0x90) 10:23:31 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x0, 0x0, 0x0, 0x88, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup3(r2, r5, 0x0) [ 300.907666][T13708] hub 9-0:1.0: USB hub found [ 300.912789][T13708] hub 9-0:1.0: 8 ports detected [ 300.975339][T13712] hub 9-0:1.0: USB hub found [ 300.989728][T13712] hub 9-0:1.0: 8 ports detected 10:23:31 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x0, 0x8001}}}, 0x90) 10:23:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x40186366, 0x0) [ 301.256669][T13730] hub 9-0:1.0: USB hub found [ 301.261616][T13730] hub 9-0:1.0: 8 ports detected 10:23:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x402c5829, 0x0) 10:23:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002bbd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0003000000f87083595607179acb286b3567a21c47e7cefc7c1053d8558b654dde78b5eec6f30619bf3c309bf75bdf06f54411c8affb7e193900e00a265a4d56d3433b34e15f2f64e4730c966f486f46960173ae4cb85f0948de8ec6a77e8e275285f3fe241e2d88c1a61c835ec088a35212e0a0232b319e63e0b2bdbd0c8d8c7a049653f8605425c695ef7764ad3eaa2e9e885788f63e281c509f91b7656d2491ba1fe30fa4b30cec928e85f575135e733641e21c3cb4ac8671bf8919df050a5e7e0165bf1220fe1b35509487974436d7c63df7d9d4879c8135b175b218f88dc8d98ef66faab1a2e873bad77b56b239cc79ba810c04af5f1b75cfed3de3cda636d8f061a9360cdf8b7a"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x40800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x76}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x1) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x4, 0x40000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) r6 = openat$pfkey(0xffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000340)=""/70) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) r7 = dup3(r3, 0xffffffffffffffff, 0x80000) r8 = accept4$unix(r7, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x80800) pread64(r8, &(0x7f0000000280)=""/158, 0x9e, 0xccf) write$P9_RSYMLINK(r3, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x4, 0x4}}, 0x14) 10:23:32 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:32 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x0, 0x8001}}}, 0x90) [ 301.427948][T13740] hub 9-0:1.0: USB hub found [ 301.444937][T13740] hub 9-0:1.0: 8 ports detected 10:23:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x3, 0x8, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1f, 0x4, 0x24400}) 10:23:32 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, r1, 0x40, 0x8001}}}, 0x90) 10:23:32 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x0, 0x8001}}}, 0x90) 10:23:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) dup3(0xffffffffffffffff, r1, 0x0) [ 301.763964][T13763] hub 9-0:1.0: USB hub found [ 301.769110][T13763] hub 9-0:1.0: 8 ports detected [ 301.812959][T13764] hub 9-0:1.0: USB hub found 10:23:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) getsockopt(r3, 0x101, 0x4, &(0x7f0000000280)=""/116, &(0x7f0000000200)=0x74) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000080)={r4, 0x80000}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x7ff, 0xff, 0x8200, 0x1, 0x7, 0x1, 0xd0e9, 0x100, r5}, &(0x7f00000001c0)=0x20) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r6 = openat$bsg(0xffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x440000, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) pidfd_getfd(r6, r7, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) dup3(r8, r3, 0x0) [ 301.852605][T13764] hub 9-0:1.0: 8 ports detected 10:23:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0, 0x0) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f0000000280)=ANY=[@ANYBLOB="d60000000ccc88b771668f044a7f230800a5c571abee79dccaf05642e6f1c97adc883ef1aa163a707f106a7e0d32a4f33d8c82418afa50182be42a82eecf5478d1fc5a35f27d3ee26e3869a1f32f0b17659fed054aaec82a0f00b6ced609060000008b823bf25f0c81a935190bb18b0f0f2e060933faa7560d37d161b6e0767e20b4f9f9c7cf43c0ab1a001c0635cfbeba763cb2a5e44936ddc879e4c188b8c25afda01d8aaa8be2065e268148e8f40e0b0e1c0f9b7d93e8084147f82fb25981aa63df67ca55d5a6685756f4411c0a1e170c8175f5251bcddac7"]) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x4000010}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) dup3(r2, r3, 0x0) 10:23:32 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fsopen(&(0x7f0000000080)='affs\x00', 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x80, 0xb710, 0x2, 0x0, {0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x955, 0x3, 0x6, 0x0, 0x0, 0x88, 0x0, r1, 0x40}}}, 0x90) 10:23:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4020940d, 0x0) [ 302.107517][T13781] ------------[ cut here ]------------ [ 302.122118][T13781] WARNING: CPU: 0 PID: 13781 at drivers/gpu/drm/vkms/vkms_gem.c:37 vkms_gem_free_object+0x85/0xa0 [ 302.142087][T13781] Kernel panic - not syncing: panic_on_warn set ... [ 302.148689][T13781] CPU: 0 PID: 13781 Comm: syz-executor.1 Not tainted 5.9.0-rc2-syzkaller #0 [ 302.157350][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.167421][T13781] Call Trace: [ 302.170712][T13781] dump_stack+0x198/0x1fd [ 302.175049][T13781] panic+0x347/0x7c0 [ 302.178947][T13781] ? __warn_printk+0xf3/0xf3 [ 302.183543][T13781] ? printk+0xba/0xed [ 302.187532][T13781] ? log_store.cold+0x16/0x16 [ 302.192340][T13781] ? __warn.cold+0x5/0x46 [ 302.196666][T13781] ? __warn+0xd6/0x1f2 [ 302.200740][T13781] ? vkms_gem_free_object+0x85/0xa0 [ 302.205940][T13781] __warn.cold+0x20/0x46 [ 302.210191][T13781] ? vkms_gem_free_object+0x85/0xa0 [ 302.215393][T13781] report_bug+0x1bd/0x210 [ 302.219755][T13781] handle_bug+0x38/0x90 [ 302.223920][T13781] exc_invalid_op+0x14/0x40 [ 302.228424][T13781] asm_exc_invalid_op+0x12/0x20 [ 302.233278][T13781] RIP: 0010:vkms_gem_free_object+0x85/0xa0 [ 302.239085][T13781] Code: 00 75 2b e8 ad 1c 0d fd 48 8d bd 30 02 00 00 e8 41 11 f2 fc 48 89 ef e8 09 62 a5 ff 48 89 ef 5d e9 10 b9 4c fd e8 8b 1c 0d fd <0f> 0b eb a8 e8 82 1c 0d fd 0f 0b eb cc e8 c9 2e 4d fd eb bb e8 c2 [ 302.258718][T13781] RSP: 0018:ffffc900072ffbe0 EFLAGS: 00010293 [ 302.264800][T13781] RAX: 0000000000000000 RBX: ffffffff84672df0 RCX: ffffffff840cb3e8 [ 302.272787][T13781] RDX: ffff88804de6a5c0 RSI: ffffffff84672e75 RDI: ffff8880a1a362c0 [ 302.280764][T13781] RBP: ffff8880a1a36000 R08: 0000000000000001 R09: ffff8880a1a36003 [ 302.288743][T13781] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888218738c28 [ 302.296721][T13781] R13: ffff8880a1a36008 R14: ffff8880a1a36128 R15: ffff88809a1ea000 [ 302.304711][T13781] ? __vkms_gem_create+0xf0/0xf0 [ 302.309657][T13781] ? drm_gem_object_handle_put_unlocked+0x1d8/0x420 [ 302.316250][T13781] ? vkms_gem_free_object+0x85/0xa0 [ 302.321461][T13781] drm_gem_object_handle_put_unlocked+0x3ac/0x420 [ 302.327883][T13781] drm_gem_object_release_handle+0xf9/0x1b0 [ 302.333791][T13781] ? drm_gem_object_handle_put_unlocked+0x420/0x420 [ 302.340379][T13781] idr_for_each+0x113/0x220 [ 302.344886][T13781] ? idr_find+0x50/0x50 [ 302.349049][T13781] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 302.354858][T13781] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 302.360843][T13781] drm_gem_release+0x22/0x30 [ 302.365434][T13781] drm_file_free.part.0+0x866/0xcb0 [ 302.370637][T13781] ? fsnotify+0xf80/0xf80 [ 302.374970][T13781] drm_close_helper.isra.0+0x17d/0x1f0 [ 302.380438][T13781] drm_release+0x1e6/0x530 [ 302.384859][T13781] __fput+0x285/0x920 [ 302.388840][T13781] ? drm_release_noglobal+0x180/0x180 [ 302.394236][T13781] task_work_run+0xdd/0x190 [ 302.398750][T13781] exit_to_user_mode_prepare+0x1e1/0x200 [ 302.404402][T13781] syscall_exit_to_user_mode+0x7e/0x2e0 [ 302.409954][T13781] __do_fast_syscall_32+0x63/0x80 [ 302.414983][T13781] do_fast_syscall_32+0x2f/0x70 [ 302.419839][T13781] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 302.426166][T13781] RIP: 0023:0xf7f2c549 [ 302.430232][T13781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.449853][T13781] RSP: 002b:00000000090afbec EFLAGS: 00000212 ORIG_RAX: 0000000000000006 [ 302.458261][T13781] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 302.466236][T13781] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.474212][T13781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.482184][T13781] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 302.490159][T13781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.499349][T13781] Kernel Offset: disabled [ 302.503671][T13781] Rebooting in 86400 seconds..