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", 0x1000}}, 0x1006) [ 1961.030953][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.062195][ T22] usb 6-1: Product: syz [ 1961.077494][ T22] usb 6-1: Manufacturer: syz [ 1961.100932][ T22] usb 6-1: SerialNumber: syz 04:26:57 executing program 2: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 1961.404067][T27514] hid-rmi 0003:06CB:81A7.0030: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 1961.519357][ T22] usb 6-1: 0:2 : does not exist [ 1961.588438][ T22] usb 6-1: USB disconnect, device number 77 [ 1961.666970][T27514] usb 5-1: USB disconnect, device number 86 04:27:07 executing program 2: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 04:27:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) ptrace(0x11, 0x0) 04:27:07 executing program 3: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7365637572690000000000000000000863694fa88a6e4e483985ef5c35bc6644680a890aa8ab80cc7300000000002000000036f8d63b98223f96863d8545e48e67747837bdf3bc3fc3a775d5470e54268b0c3f54851aa85c913da67b096bb2a576a1867ba8c42ffa9bee6f18ec29ac1a8e24ecafd316fff966e44439c881593aab520819e2387f70411d198fcd918ba3b6de7a9c7ced2e6e31a82627d91eafcf2131588e1d6d96ce7b5e69e711353558c8152453e3192bdd800d84395122176fb4ec3dfdf31c8b7c512c6289a47d3b14218bd0996c555338ed9ca96afe5ac07910372bcc7b7f97341c190bd28d229f4cf0b0be1ce05643f149216b4302e4c5e057776f2112ba246a923cef95610332a4a82298faafb547e62a560554012410c8b327a3634f25fa78c622a5a02e9a66ff1d2d7ded7acd4f395da878c1b54af8ad975fe7793dc519b591bdb2ada1"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 04:27:07 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x80, {0x7}}}}}}}]}}, 0x0) 04:27:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "15117c72"}]}}, 0x0}, 0x0) 04:27:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x8001, 0x4) sendfile(r0, r2, 0x0, 0x100000000002) [ 1971.151067][T28133] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1971.187736][T28133] device 00ªX entered promiscuous mode [ 1971.264597][T28141] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1971.312372][T28141] 1ªX: renamed from 00ªX [ 1971.322804][T28141] device 01ªX left promiscuous mode [ 1971.350231][T28141] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. [ 1971.379342][T27421] usb 6-1: new high-speed USB device number 78 using dummy_hcd 04:27:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) ptrace(0x11, 0x0) [ 1971.479200][ T22] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1971.639221][T27421] usb 6-1: Using ep0 maxpacket: 32 04:27:07 executing program 2: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 1971.682507][T28145] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1971.724027][T28145] device 01ªX entered promiscuous mode [ 1971.729408][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 1971.755505][T28148] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1971.790010][T28148] 0ªX: renamed from 01ªX [ 1971.799710][T27421] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1971.815335][T27421] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1971.844404][T27421] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1971.849510][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:27:08 executing program 3: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 1971.945978][T28148] device 00ªX left promiscuous mode [ 1971.992385][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.005330][T28148] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 1972.021477][T27421] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1972.047121][ T22] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1972.047145][T27421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.047183][T27421] usb 6-1: Product: syz [ 1972.100475][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:27:08 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x72) [ 1972.146229][T27421] usb 6-1: Manufacturer: syz [ 1972.154273][ T22] usb 5-1: config 0 descriptor?? [ 1972.169684][T27421] usb 6-1: SerialNumber: syz 04:27:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 04:27:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) [ 1972.549339][T27421] usb 6-1: 0:2 : does not exist 04:27:08 executing program 2: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 1972.572960][T27421] usb 6-1: USB disconnect, device number 78 [ 1972.642694][T28140] udevd[28140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1972.664794][ T22] hid-rmi 0003:06CB:81A7.0031: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 04:27:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 04:27:09 executing program 3: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000040100e0bc6809"], 0x10) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x8, 0x0, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x44) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) recvfrom$inet6(r3, &(0x7f0000000400)=""/155, 0x9b, 0x10121, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x140e}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 1972.955344][T27231] usb 5-1: USB disconnect, device number 87 04:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 04:27:09 executing program 5: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x60401, 0x0) io_setup(0x3, &(0x7f00000013c0)=0x0) io_submit(r1, 0x1, &(0x7f00000015c0)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001400)='4', 0x1}]) [ 1980.822176][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.828544][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:27:17 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0305720, &(0x7f0000000040)) 04:27:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f00000004c0)=""/2, 0x2, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="03036e", 0x3, 0x0, 0x0, 0x0) 04:27:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@dev, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x32) 04:27:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "15117c72"}]}}, 0x0}, 0x0) 04:27:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x17, {0x17, 0x0, "0354d6277bc31c9ddd10cc32f9ca5c2de31a756e74"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:27:17 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000440)) 04:27:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/4, 0x4}], 0x1) 04:27:17 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x2c}}, 0x0) 04:27:17 executing program 3: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:17 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 1981.759346][T27514] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1981.799160][T27422] usb 5-1: new high-speed USB device number 88 using dummy_hcd 04:27:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 1982.009762][T27514] usb 6-1: Using ep0 maxpacket: 16 [ 1982.079290][T27422] usb 5-1: Using ep0 maxpacket: 8 [ 1982.129619][T27514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1982.150612][T27514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1982.179310][T27514] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1982.200667][T27514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.219947][T27422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1982.234354][T27514] usb 6-1: config 0 descriptor?? [ 1982.241915][T27422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1982.269578][T27422] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1982.295413][T27422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.326239][T27422] usb 5-1: config 0 descriptor?? [ 1982.839573][T27422] hid-rmi 0003:06CB:81A7.0032: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 1982.878727][T27514] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0033/input/input86 [ 1982.982464][T27514] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0033/input/input87 [ 1983.076553][T27514] kye 0003:0458:5019.0033: input,hiddev0,hidraw1: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 1983.142720][T27514] usb 6-1: USB disconnect, device number 79 [ 1983.169791][T27230] usb 5-1: USB disconnect, device number 88 04:27:27 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000580)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x3e) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r3 = dup3(r2, r0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 04:27:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/4, 0x4}], 0x1) 04:27:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x17, {0x17, 0x0, "0354d6277bc31c9ddd10cc32f9ca5c2de31a756e74"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:27:28 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="380a01b3d6bab50a5426346f8ec4e1737bde32ba78e715ed4d85b1f74cef870da961e95ef7d7796f4ee46074afdc5a7a79b51fc59d21c844ce5489e63c98024df94c65b408c051887da6ba89bc98cbbc96114b2ccd0965fab68de3dcb58ddfbea661ff58bc35939c530bb6a9bc3ae88bd6a2befac52b9b9b000000000100000078a8df547790bcd1ac3232abebe6ae81099e9fb64c98e7c642fcb2acff9e741112e45b336abc5b0d5358a42566a6e958916f585b9b0c90c4ad106552b612a6224db835aa40d605f0e0a248dc695262301d4f67b06a9829c71ff2cecfd3cce08c17c52ac55dda170e97a11044370d3d0000000000000000000000000020d3a5f8928e9e806cecf73b7684cf54c2e9cd529d493e4f280397bb3cae0fee725703bfe86ad1a24805078e00"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:28 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:28 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="500800001a00080025bd7000fbdbdf250a140005fd01fe03000200000c001680080004008500000008081680040801000200000000000000330c0406fa00fffffe800000000000000000000000000011fc00000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000aafc01000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000101fc010000000000000000000000000000200100006a00000000000000000000000020010000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffac1414bbfe880000000000000000000000000101fc020000000000000000000000000000fe88000000000000000000000000010100000000000000000000000000000000fe880000000000000000000000000001fe880000000000000000000000000001fc010000000000000000000000000000fc0100000000000000000000000000000000000000000000000000927d0000000000000000000000000000000000000000000000000000001000000000000001fc01000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aafe80000000000000000000000000002bfc02000000000000000000000000000120010000000000000000000000000002fe800000000000000000000000000021fe880000000000000000000000000101fe8000000000000000000000000000aafe8000000000000000000000000000410000000000000000000000000000000000000000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bbfc0100000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000fc00000000000000000000000000000000000000000000000000000000000001fc000000000000000000000000000001ff010000000000000000000000000001fc00000000000000000000000000000000000000000000000000ffff00000000fe88000000000000000000000000010100000000000000000000000000000000fc020000000000000000000000000000ff020000000000000000000000000001fe880000000000000000000000000001fc010000000000000000000000000000ff020000000000000000000000000001fc00000000000000000000000000000100000000000000000000000000000001fc020000000000000000200000000001fe8000000000000000000000000000bb0000000000000000000012a38d3930005c4a00000000000000000000000000002001000000000000000000000000000020010000000000000000000000000001fe8000000000000000000000000000bbfe80000000000000000000000000000bfe880000000000000000000000000001fc01000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000001efe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000fc000000000000000000000000000001fc01000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000000012001000000000000000000000000000100000000000000000000ffffac1414bbfc010000000000000000000000000001fc020000000000000000000000000000ff020000000000000000000000000001fc000000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000aa2001000000000000000000000000000000000000000000000000ffff640101020000000000000000000000000000000100000000000000000000000000000000ff020000000000000000000000000001ff010000000000000000000000000001fe880000000000000000000000000101fc010000000000000000000000000001fc010000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001ff020000000000000000000000000001fe800000000000000000000000000013fc010000000000000000000000000001fe8000000000000000000000000000bb0000000000000000000000000000000100000000cd965ced0000000000000001fc0000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000000fc020000000000000000000000000001fc00000000000000000000000000000100000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafe80000000000000000000000000001afc000000000000000000000000000001fe8000000000000000000000000000bbfc020000000000000000000000000000fe800000000000000000000000000032fe880000000000000000000000000101fe88000000000000000000000020010120010000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000120010000000000000000000000000001fe800000000000000000000000000016fc010000000000000000000000000000fc010000000000000000000000000001ff0100000000000000000000000000010c00168005000400440000000c00168008000200e0000001080003007c6b2e5915a7a6bd7e5ce96a2687c259d215c3cf5d78a8", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:28 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="380a01b3d6bab50a5426346f8ec4e1737bde32ba78e715ed4d85b1f74cef870da961e95ef7d7796f4ee46074afdc5a7a79b51fc59d21c844ce5489e63c98024df94c65b408c051887da6ba89bc98cbbc96114b2ccd0965fab68de3dcb58ddfbea661ff58bc35939c530bb6a9bc3ae88bd6a2befac52b9b9b000000000100000078a8df547790bcd1ac3232abebe6ae81099e9fb64c98e7c642fcb2acff9e741112e45b336abc5b0d5358a42566a6e958916f585b9b0c90c4ad106552b612a6224db835aa40d605f0e0a248dc695262301d4f67b06a9829c71ff2cecfd3cce08c17c52ac55dda170e97a11044370d3d0000000000000000000000000020d3a5f8928e9e806cecf73b7684cf54c2e9cd529d493e4f280397bb3cae0fee725703bfe86ad1a24805078e00"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="380a01b3d6bab50a5426346f8ec4e1737bde32ba78e715ed4d85b1f74cef870da961e95ef7d7796f4ee46074afdc5a7a79b51fc59d21c844ce5489e63c98024df94c65b408c051887da6ba89bc98cbbc96114b2ccd0965fab68de3dcb58ddfbea661ff58bc35939c530bb6a9bc3ae88bd6a2befac52b9b9b000000000100000078a8df547790bcd1ac3232abebe6ae81099e9fb64c98e7c642fcb2acff9e741112e45b336abc5b0d5358a42566a6e958916f585b9b0c90c4ad106552b612a6224db835aa40d605f0e0a248dc695262301d4f67b06a9829c71ff2cecfd3cce08c17c52ac55dda170e97a11044370d3d0000000000000000000000000020d3a5f8928e9e806cecf73b7684cf54c2e9cd529d493e4f280397bb3cae0fee725703bfe86ad1a24805078e00"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 04:27:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) 04:27:28 executing program 0: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) 04:27:28 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x902, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0x9) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001140)) set_mempolicy(0x8000, &(0x7f00000000c0)=0x81, 0x3) ioctl$TIOCEXCL(r0, 0x540c) mq_timedreceive(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x109200, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001340)="5ac099a5ac838177a09e82ef340a405cf5187b6fb570a3de63ebdf4ff9b38d859894f66cf547ae2bf702d08f870b4c6d0798e22658e4c6f367cd7f3d61a80db437dde6c29a3c19aec180ca8df98289bed856c88748fcc4b4fb03d1bec864b7cf2afba08570b80bc0cd7519d3bbba9ec6aec37bf5319e017f74ef69e87190f88307540cd8615bd795f7dc7b6c649b173f45afc48e39c06da486aae207b9ecee1c870acf4f466af956784552af9afef7161f4d9ba35775f3", 0xb7, 0x11, &(0x7f0000001400)={0x77359400}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) futex(&(0x7f0000001200)=0x2, 0x1, 0x2, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)=0x2, 0x1) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x0, 0x0, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000001440)="2691e0bdb7881849c4447316921f39e4fb908e8ee890bdbc2d44b295f3c57d481a7b2c60b0e788dcd7a423b15fce2f0e882e72c800ee4dccaf9bb6669137ca446f83b2dba23444d168a82498ffc77cd6b5551c", 0x53, 0xfffffffffffffff7, &(0x7f0000001500)={r7, r8+10000000}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001180)) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/312], 0x850}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 1992.210224][T27422] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1992.303146][T28241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 1992.492145][T27422] usb 6-1: Using ep0 maxpacket: 16 [ 1992.524579][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1992.629773][T27422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1992.650222][T27422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1992.679168][T27422] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1992.704838][T27422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.737295][T27422] usb 6-1: config 0 descriptor?? [ 1993.378211][T27422] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0034/input/input88 [ 1993.494413][T27422] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0034/input/input89 [ 1993.566037][T27422] kye 0003:0458:5019.0034: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 1993.620879][T27422] usb 6-1: USB disconnect, device number 80 04:27:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) 04:27:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 04:27:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) 04:27:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/4, 0x4}], 0x1) 04:27:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 04:27:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x17, {0x17, 0x0, "0354d6277bc31c9ddd10cc32f9ca5c2de31a756e74"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2002.428810][T28257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2002.446153][T28261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007c1830e12e73c28269e142f8696316857dc0af18890a1cf9b8935cfaf8fe49a832025af7aaa9d59ad5107cc8f38f018070d2979d86f6f9e05e46b940f2f15bf4dccc096508cc9da3f30b52130abdd0fa129c6c64"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x1) ftruncate(r2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 04:27:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 04:27:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) [ 2002.689844][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2002.719149][T27421] usb 6-1: new high-speed USB device number 81 using dummy_hcd 04:27:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 2002.831851][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2002.925986][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2002.989290][T27421] usb 6-1: Using ep0 maxpacket: 16 04:27:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) [ 2003.119483][T27421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2003.163685][T27421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2003.226879][T27421] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2003.279779][T28286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2003.304984][T27421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:27:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/4, 0x4}], 0x1) [ 2003.388065][T27421] usb 6-1: config 0 descriptor?? [ 2004.105308][T27421] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0035/input/input90 [ 2004.212440][T27421] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0035/input/input91 [ 2004.291482][T27421] kye 0003:0458:5019.0035: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 2004.338609][T27421] usb 6-1: USB disconnect, device number 81 [ 2008.720594][T28300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:27:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) 04:27:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007c1830e12e73c28269e142f8696316857dc0af18890a1cf9b8935cfaf8fe49a832025af7aaa9d59ad5107cc8f38f018070d2979d86f6f9e05e46b940f2f15bf4dccc096508cc9da3f30b52130abdd0fa129c6c64"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x1) ftruncate(r2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 04:27:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00a55d41f608000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) write$tun(r2, &(0x7f0000000340)={@void, @void, @eth={@empty, @dev, @val={@void}}}, 0x12) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:27:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:27:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:27:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x17, {0x17, 0x0, "0354d6277bc31c9ddd10cc32f9ca5c2de31a756e74"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2010.924459][T28310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2010.985016][T28310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2011.049443][T27514] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2011.067806][T28310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 04:27:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00a55d41f608000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) write$tun(r2, &(0x7f0000000340)={@void, @void, @eth={@empty, @dev, @val={@void}}}, 0x12) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 2011.299306][T27514] usb 6-1: Using ep0 maxpacket: 16 [ 2011.419454][T27514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2011.444980][T27514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2011.454138][T28321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2011.472064][T27514] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2011.489718][T27514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.510174][T27514] usb 6-1: config 0 descriptor?? [ 2011.536171][T28321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 04:27:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:27:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00a55d41f608000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) write$tun(r2, &(0x7f0000000340)={@void, @void, @eth={@empty, @dev, @val={@void}}}, 0x12) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:27:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007c1830e12e73c28269e142f8696316857dc0af18890a1cf9b8935cfaf8fe49a832025af7aaa9d59ad5107cc8f38f018070d2979d86f6f9e05e46b940f2f15bf4dccc096508cc9da3f30b52130abdd0fa129c6c64"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x1) ftruncate(r2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) [ 2012.014728][T28326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2012.065851][T28326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2012.164561][T27514] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0036/input/input92 [ 2012.338134][T27514] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0036/input/input93 04:27:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00a55d41f608000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2912}) write$tun(r2, &(0x7f0000000340)={@void, @void, @eth={@empty, @dev, @val={@void}}}, 0x12) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 2012.435221][T27514] kye 0003:0458:5019.0036: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 2012.537031][T27514] usb 6-1: USB disconnect, device number 82 04:27:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) [ 2012.603860][T28334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2012.762088][T28334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2021.230605][T28343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:27:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@bridge_setlink={0xb4, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x48000, 0x1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8000000000000001, 0x1, 0x8, 0x1, 0x4, 0xef}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xce3c}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x127b6}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "2ee863a5c7f4490144db475ed0ce77aec1f72e75c91145f16cf1dc9a7ae2"}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6166c}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x43, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8, 0x6b, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x78, 0x1d, 0x20, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x40, 0x5, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffff000, 0xfffffff8, 0x4, 0x100}}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x80, 0x6, 0x5}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x3208, 0x8649, 0x7}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xe}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x54}}, 0x0) 04:27:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:27:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:27:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x711, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) 04:27:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007c1830e12e73c28269e142f8696316857dc0af18890a1cf9b8935cfaf8fe49a832025af7aaa9d59ad5107cc8f38f018070d2979d86f6f9e05e46b940f2f15bf4dccc096508cc9da3f30b52130abdd0fa129c6c64"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x1) ftruncate(r2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 04:27:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000500)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "1c2f65df1bc501155748f24ed345df227e004bc6a32566374539c892000a1fb8239cc41703d2bb8c354c79c41772902d417c6ecaedf5a1cf567bae8e8552fea450f012b09b3ea31f8343af63381a12b0ca346a7069c1c878c58d75ce9edced9cb1edf5c3df0ba55644d9eefe430cabab6cf41d45a446d700c882ae75423df00932b12b11562ff275a5d7ed0eadd2a3d5e887f61fd151616b79660b2038f17cdb1b00add084bba8c9881e3365460b72cfc5232c126f903dfa8e0ae2cbfeb15bfcd900ba50fce6b9646335e763519a7a3c71330581caf0f6c07a6552517f4135024d3ac8e9023e8df494b77fd72fdd36aa884aebd8c8b0db2b591b8a62c975bc44"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x4, 0x6}]}}]}, 0x178}}, 0x0) 04:27:57 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf0e8) [ 2021.370079][T28349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2021.479402][T28357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:27:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x417, 0x0, 0x0, {0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}, 0x1, 0x3f000000}, 0x0) 04:27:57 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf0e8) 04:27:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000000240), 0x0, 0x40000020}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 04:27:58 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf0e8) 04:27:58 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf0e8) 04:28:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) 04:28:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000000240), 0x0, 0x40000020}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 04:28:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x50c, 0xffffffff, 0x2c8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x440, 0x440, 0x440, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @private2, [], [], 'sit0\x00', 'ip6erspan0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'veth1_vlan\x00', 'veth1_to_bond\x00'}, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private0, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00', @local]}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x154, 0x178, 0x0, {}, [@common=@icmp6={{0x24}, {0x0, "d563"}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, @dev}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x564) 04:28:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:28:06 executing program 4: r0 = syz_io_uring_setup(0x4ca1, &(0x7f0000000180), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:28:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:28:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:28:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae03, 0x4c) [ 2031.196324][ T27] audit: type=1804 audit(1676867287.306:1504): pid=28397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1055/file0/bus" dev="ramfs" ino=696894 res=1 errno=0 04:28:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000008440), &(0x7f0000008480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r3) [ 2031.332380][ T27] audit: type=1804 audit(1676867287.346:1505): pid=28397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1055/file0/bus" dev="ramfs" ino=696894 res=1 errno=0 [ 2031.457663][ T27] audit: type=1804 audit(1676867287.426:1506): pid=28401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1055/file0/bus" dev="ramfs" ino=696894 res=1 errno=0 04:28:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x5eb, 0x7000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000580), 0x9, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000840)={r0, 0xfffffd91, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 04:28:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000000240), 0x0, 0x40000020}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 04:28:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2142) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) 04:28:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x0, 0xea60}, 0x4, 0x7ff}, 0x18) 04:28:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 04:28:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2142) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) 04:28:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000000240), 0x0, 0x40000020}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 04:28:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:28:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 2040.262844][ T27] audit: type=1804 audit(1676867296.376:1507): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/1080/file0/bus" dev="ramfs" ino=699702 res=1 errno=0 [ 2040.408540][ T27] audit: type=1804 audit(1676867296.406:1508): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/1080/file0/bus" dev="ramfs" ino=699702 res=1 errno=0 04:28:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2142) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) [ 2040.648336][ T27] audit: type=1804 audit(1676867296.426:1509): pid=28431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1056/file0/bus" dev="ramfs" ino=702015 res=1 errno=0 [ 2040.753723][ T27] audit: type=1804 audit(1676867296.426:1510): pid=28431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1056/file0/bus" dev="ramfs" ino=702015 res=1 errno=0 [ 2040.810110][ T27] audit: type=1804 audit(1676867296.566:1511): pid=28433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/1080/file0/bus" dev="ramfs" ino=699702 res=1 errno=0 [ 2040.921328][ T27] audit: type=1804 audit(1676867296.696:1512): pid=28434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1056/file0/bus" dev="ramfs" ino=702015 res=1 errno=0 04:28:17 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) lseek(r0, 0xfffffffffffffff7, 0x1) 04:28:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2142) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) 04:28:17 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x43c00) close(r0) 04:28:17 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000002140)='westwood\x00', 0x3fffff) 04:28:18 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000002140)='westwood\x00', 0x3fffff) [ 2042.261046][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.267441][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:28:25 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x0, 0x81}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 04:28:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:28:25 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}}) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xa, 0x3ff}, {0x7}]}, 0x14, 0x3) 04:28:25 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000002140)='westwood\x00', 0x3fffff) 04:28:25 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='xfs\x00', 0x1000010, 0x0) 04:28:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:28:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000180)=""/171, &(0x7f0000000080)=0xab) [ 2049.458597][ T27] audit: type=1804 audit(1676867305.566:1513): pid=28466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1057/file0/bus" dev="ramfs" ino=707214 res=1 errno=0 04:28:25 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000002140)='westwood\x00', 0x3fffff) 04:28:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) [ 2049.552664][ T27] audit: type=1804 audit(1676867305.566:1514): pid=28466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1057/file0/bus" dev="ramfs" ino=707214 res=1 errno=0 [ 2049.653352][ T27] audit: type=1804 audit(1676867305.616:1515): pid=28467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/1081/file0/bus" dev="ramfs" ino=707229 res=1 errno=0 04:28:25 executing program 3: io_setup(0x20, &(0x7f00000003c0)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x1, 0x0, r1, &(0x7f0000000500)="01000000", 0x4}]) [ 2049.815921][ T27] audit: type=1804 audit(1676867305.626:1516): pid=28467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/1081/file0/bus" dev="ramfs" ino=707229 res=1 errno=0 [ 2049.945027][ T27] audit: type=1804 audit(1676867305.726:1517): pid=28470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1057/file0/bus" dev="ramfs" ino=707214 res=1 errno=0 04:28:26 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="f1"], 0x348) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) 04:28:26 executing program 3: syz_clone(0xc5049400, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000280)) [ 2050.042784][ T27] audit: type=1804 audit(1676867305.736:1518): pid=28471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/1081/file0/bus" dev="ramfs" ino=707229 res=1 errno=0 04:28:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff79bf}]}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, r2+10000000}, &(0x7f00000002c0)) 04:28:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x4c, r1, 0x9, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffec5}, {0x6}}]}, 0x4c}}, 0x0) 04:28:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff79bf}]}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, r2+10000000}, &(0x7f00000002c0)) 04:28:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 04:28:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:28:40 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}}) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xa, 0x3ff}, {0x7}]}, 0x14, 0x3) 04:28:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:28:41 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000003c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = dup2(r0, r0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a4, &(0x7f0000000100)={{@host}}) 04:28:41 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) [ 2065.029192][ T27] audit: type=1804 audit(1676867321.136:1519): pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/1082/file0/bus" dev="ramfs" ino=716823 res=1 errno=0 [ 2065.108119][ T27] audit: type=1804 audit(1676867321.166:1520): pid=28504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1058/file0/bus" dev="ramfs" ino=716824 res=1 errno=0 [ 2065.199775][ T27] audit: type=1804 audit(1676867321.176:1521): pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/1082/file0/bus" dev="ramfs" ino=716823 res=1 errno=0 [ 2065.346394][ T27] audit: type=1804 audit(1676867321.176:1522): pid=28504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1058/file0/bus" dev="ramfs" ino=716824 res=1 errno=0 [ 2065.368632][ T27] audit: type=1804 audit(1676867321.286:1523): pid=28508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1058/file0/bus" dev="ramfs" ino=716824 res=1 errno=0 [ 2065.392478][ T27] audit: type=1804 audit(1676867321.306:1524): pid=28511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/1082/file0/bus" dev="ramfs" ino=716823 res=1 errno=0 04:28:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff79bf}]}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, r2+10000000}, &(0x7f00000002c0)) 04:28:42 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 04:28:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff79bf}]}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, r2+10000000}, &(0x7f00000002c0)) 04:28:42 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8942, &(0x7f0000000000)={'vxcan0\x00'}) 04:28:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000500)=0xe46d, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 04:28:50 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xf87, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 04:28:50 executing program 2: r0 = gettid() rt_sigqueueinfo(r0, 0x500, &(0x7f0000000040)) 04:28:50 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 04:28:50 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}}) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xa, 0x3ff}, {0x7}]}, 0x14, 0x3) 04:28:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) 04:28:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x31324d4e}}) 04:28:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x31324d4e}}) 04:28:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) memfd_secret(0x0) 04:28:50 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c40)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'E'}, 0x0, 0x0}) 04:28:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x18}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:28:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x31324d4e}}) 04:28:50 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="1c0000005e002176df0ee37529906e34f31bf5c185b7b197bd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1004}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2074.619236][T27514] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2074.999457][T27514] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2075.008648][T27514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.039661][T27514] usb 6-1: config 0 descriptor?? [ 2075.759798][T27514] (unnamed net_device) (uninitialized): Assigned a random MAC address: f2:4d:c7:bc:47:d5 [ 2075.795145][T27514] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 2075.963815][T27514] usb 6-1: USB disconnect, device number 83 04:29:04 executing program 1: r0 = socket(0xa, 0x3, 0x7) io_setup(0x200, &(0x7f0000000000)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r1, 0x2, &(0x7f00000009c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)='p', 0x1, 0x7fffffffffffffff}]) 04:29:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x31324d4e}}) 04:29:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x10}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 04:29:04 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 04:29:04 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000f, 0x6031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00008cd000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}}) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xa, 0x3ff}, {0x7}]}, 0x14, 0x3) 04:29:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c40)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'E'}, 0x0, 0x0}) 04:29:04 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6b9ce04c16762ec0abd121bfe5d68a01b7f4f4168b78bcb0", "a3430d7d386f9d13fcb56fe1d586a289d5541cc3908ad9fd705af674e64b5239"}}}}}}, 0x0) 04:29:04 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81032) [ 2088.999108][T24480] usb 6-1: new high-speed USB device number 84 using dummy_hcd 04:29:05 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6b9ce04c16762ec0abd121bfe5d68a01b7f4f4168b78bcb0", "a3430d7d386f9d13fcb56fe1d586a289d5541cc3908ad9fd705af674e64b5239"}}}}}}, 0x0) 04:29:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x1b, 0x5b, 0x7, 0x7, 0x31, 0x31, 0x3b, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 04:29:05 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6b9ce04c16762ec0abd121bfe5d68a01b7f4f4168b78bcb0", "a3430d7d386f9d13fcb56fe1d586a289d5541cc3908ad9fd705af674e64b5239"}}}}}}, 0x0) 04:29:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2089.389212][T24480] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2089.422409][T24480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.479965][T24480] usb 6-1: config 0 descriptor?? [ 2090.249654][T24480] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:55:2f:27:0d:a7 [ 2090.293096][T24480] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 2090.503459][T24480] usb 6-1: USB disconnect, device number 84 04:29:15 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0x0, "48848a5dbb95d2fe9c0b538284d5de3c8a3ed50b8988b70df79588c1cef0f6e5"}) 04:29:15 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) memfd_create(&(0x7f00000001c0)='\f\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000700), 0x0) 04:29:15 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6b9ce04c16762ec0abd121bfe5d68a01b7f4f4168b78bcb0", "a3430d7d386f9d13fcb56fe1d586a289d5541cc3908ad9fd705af674e64b5239"}}}}}}, 0x0) 04:29:15 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) shutdown(r1, 0x1) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) 04:29:15 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c40)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'E'}, 0x0, 0x0}) 04:29:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@dstopts_2292={{0x2e8, 0x29, 0x4, {0x0, 0x5a, '\x00', [@jumbo, @generic={0x0, 0xdf, "aac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b"}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0xfffffffffffffd74, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x2e8}}], 0x2, 0x0) 04:29:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 04:29:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x80) 04:29:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) io_setup(0xffff, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b80), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x1c, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) 04:29:15 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8800, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 04:29:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x13, r0, 0x0) [ 2099.499657][T27422] usb 6-1: new high-speed USB device number 85 using dummy_hcd 04:29:15 executing program 2: mremap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x7ffffffff000, 0x3, &(0x7f0000fe8000/0x2000)=nil) [ 2099.899242][T27422] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2099.908763][T27422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.923244][T27422] usb 6-1: config 0 descriptor?? [ 2100.599427][T27422] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7e:07:a4:0b:94:db [ 2100.635709][T27422] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 2100.841314][T27422] usb 6-1: USB disconnect, device number 85 [ 2103.702408][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.708887][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.713114][T24481] kworker/dying (24481) used greatest stack depth: 21416 bytes left 04:29:21 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000300)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)) syz_clone(0x40000000, &(0x7f0000002940)='!P', 0x2, 0x0, 0x0, &(0x7f0000002a80)="c62df2742aa19714") signalfd(0xffffffffffffffff, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b40)) syz_open_dev$vcsn(&(0x7f0000003c80), 0x100000000, 0x6c000) 04:29:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x13, r0, 0x0) 04:29:21 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x81fa, 0x9, 0x9, 0x506, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000001100)=ANY=[@ANYBLOB="1803103b8e2b882800ca7fa41e0000011e0800005d140000e102ecc1bd7b466ed6946b132415ce882e2de7ee058e4e21ab42eafa5a62812128d94d287ae73dec30e422e15fb80c3ad32440278d25f0697e35309c2e5b8db69efe16479d72b7bb9c335d321f7c0a74c6a2c0342c7a5441258d1632d5e3d0ba32afacaac04ca9e9a4f202507702a3ea587ae12dd0102b0f000046835a560aabdc4e91bbcdb12f9d77", @ANYRES32, @ANYBLOB="be378e71a7d07c3e4ff0d4b800100000000047ea282154c2c3e8a4b7bf4053be0000790000000000edffffff0000080000000000185a00001000000000000000000000004335da41bcad9b9eca1fc09600"/93], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) unshare(0x200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000680)="820715d0db6766c7442400350b00006766c7442402000000006766c744240600000000670f011c24dbc90f01caba6100ed0f01f6640f0e6766c7442400003000000f1c8233386766c744240600000000670ec101c62c2c38cc9b0da0", 0x60}], 0x10b, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) timer_settime(r2, 0x0, &(0x7f0000000500)={{}, {0x77359400}}, &(0x7f0000000c80)) 04:29:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003600)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000000c0)='`'}) 04:29:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c40)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'E'}, 0x0, 0x0}) 04:29:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8800, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2105.634783][T28757] binder: 28754:28757 ioctl c0306201 20003600 returned -14 04:29:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005940), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 04:29:22 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8800, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2105.879162][T27422] usb 6-1: new high-speed USB device number 86 using dummy_hcd 04:29:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x13, r0, 0x0) 04:29:22 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8800, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 04:29:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000003100), 0x2, 0x2) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "03000140"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) [ 2106.279256][T27515] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2106.299609][T27422] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2106.318415][T27422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.375948][T27422] usb 6-1: config 0 descriptor?? 04:29:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000003100), 0x2, 0x2) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "03000140"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) [ 2106.799362][T27515] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2106.813228][T27515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.829703][T27515] usb 4-1: Product: syz [ 2106.839792][T27515] usb 4-1: Manufacturer: syz [ 2106.849329][T27515] usb 4-1: SerialNumber: syz [ 2106.864043][T27515] usb 4-1: config 0 descriptor?? [ 2107.119419][T27422] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:c4:21:d4:4a:59 [ 2107.144177][T27422] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 2107.440965][T28176] usb 6-1: USB disconnect, device number 86 [ 2107.606208][T27515] usb 4-1: USB disconnect, device number 110 04:29:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:36 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000003100), 0x2, 0x2) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "03000140"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 04:29:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4143, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 04:29:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x13, r0, 0x0) 04:29:36 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000080)='no,,er\xe8\xe8\xb5;%j\xb8\xbc\n\x87\xfc\x7f\x98\xe6,,\x80@q\xac\x14\xda\xf7\x1d\b\xf4`\xcbd9\xf4\xf4\xc0\x8f\xb7\x15\x85`\xaa\xbcy') 04:29:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:36 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000080)='no,,er\xe8\xe8\xb5;%j\xb8\xbc\n\x87\xfc\x7f\x98\xe6,,\x80@q\xac\x14\xda\xf7\x1d\b\xf4`\xcbd9\xf4\xf4\xc0\x8f\xb7\x15\x85`\xaa\xbcy') 04:29:36 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000003100), 0x2, 0x2) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "03000140"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 04:29:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000000)) 04:29:36 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f88aa0", 0x28, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x0, 0x3, '\x00', [@ra, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2}]}]}}}}}, 0x0) 04:29:36 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4, 0x0) 04:29:36 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000080)='no,,er\xe8\xe8\xb5;%j\xb8\xbc\n\x87\xfc\x7f\x98\xe6,,\x80@q\xac\x14\xda\xf7\x1d\b\xf4`\xcbd9\xf4\xf4\xc0\x8f\xb7\x15\x85`\xaa\xbcy') [ 2120.209400][T27422] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2120.809802][T27422] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2120.818931][T27422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.827765][T27422] usb 4-1: Product: syz [ 2120.832589][T27422] usb 4-1: Manufacturer: syz [ 2120.837276][T27422] usb 4-1: SerialNumber: syz [ 2120.861635][T27422] usb 4-1: config 0 descriptor?? [ 2121.594362][T27422] usb 4-1: USB disconnect, device number 111 [ 2121.643873][T28841] udevd[28841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2126.449311][T27230] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2126.969527][T27230] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2126.982939][T27230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.000971][T27230] usb 2-1: Product: syz [ 2127.010845][T27230] usb 2-1: Manufacturer: syz [ 2127.020452][T27230] usb 2-1: SerialNumber: syz [ 2127.039565][T27230] usb 2-1: config 0 descriptor?? [ 2127.785411][T27230] usb 2-1: USB disconnect, device number 54 04:29:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000080)='no,,er\xe8\xe8\xb5;%j\xb8\xbc\n\x87\xfc\x7f\x98\xe6,,\x80@q\xac\x14\xda\xf7\x1d\b\xf4`\xcbd9\xf4\xf4\xc0\x8f\xb7\x15\x85`\xaa\xbcy') 04:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0xe65, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 04:29:44 executing program 2: clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 04:29:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f00000014c0)=0x8) 04:29:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:44 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="a111f504fd58", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '(\x00', 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 04:29:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 04:29:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f00000014c0)=0x8) 04:29:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "1cbaf6a224c1e358"}) 04:29:44 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000f80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 04:29:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f00000014c0)=0x8) [ 2128.671216][T27230] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2129.209719][T27230] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2129.219403][T27230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.235905][T27230] usb 4-1: Product: syz [ 2129.246371][T27230] usb 4-1: Manufacturer: syz [ 2129.257296][T27230] usb 4-1: SerialNumber: syz [ 2129.292511][T27230] usb 4-1: config 0 descriptor?? [ 2130.036601][T27230] usb 4-1: USB disconnect, device number 112 [ 2139.090078][T28774] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2139.689584][T28774] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2139.698753][T28774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.719098][T28774] usb 2-1: Product: syz [ 2139.723668][T28774] usb 2-1: Manufacturer: syz [ 2139.739113][T28774] usb 2-1: SerialNumber: syz [ 2139.746153][T28774] usb 2-1: config 0 descriptor?? [ 2140.490266][T28774] usb 2-1: USB disconnect, device number 55 [ 2140.529689][T28889] udevd[28889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:29:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 04:29:57 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000140)) 04:29:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f00000014c0)=0x8) 04:29:57 executing program 5: syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x0, 0x5}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "38eefd", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000000000000000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 04:29:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0x13, 0x40, 0x763, 0x2080, 0xd048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xa0, 0x62}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "7be992bc4a0967811453d1c32ea9c2c974c7ddf74c8f53eabd1ccc7b919194026d9e60c2"}}, 0x0, 0x0}, 0x0) 04:29:57 executing program 4: r0 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000001080)='nolazytime\x00', &(0x7f00000010c0)='`', 0x100000) 04:29:57 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 04:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 04:29:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f1c14f9f4070009ea000200200000000000000000000800020006000000", 0x24) 04:29:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 2141.410685][T27515] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2141.491419][T28913] binder: 28908:28913 ioctl c0306201 20001480 returned -14 [ 2141.542203][T28913] binder: transaction release 118 bad object at offset 768, size 0 [ 2141.667283][T28913] binder: transaction release 118 bad object at offset 0, size 0 [ 2141.727746][T28913] binder: transaction release 118 bad object at offset 0, size 0 [ 2141.939789][T27515] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2141.948922][T27515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.957123][T27515] usb 4-1: Product: syz [ 2141.969240][T27515] usb 4-1: Manufacturer: syz [ 2141.981827][T27515] usb 4-1: SerialNumber: syz [ 2142.027859][T27515] usb 4-1: config 0 descriptor?? [ 2142.779436][T27515] usb 4-1: USB disconnect, device number 113 [ 2149.739217][T27230] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2150.269581][T27230] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.48 [ 2150.282705][T27230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.301312][T27230] usb 2-1: Product: syz [ 2150.310551][T27230] usb 2-1: Manufacturer: syz [ 2150.320717][T27230] usb 2-1: SerialNumber: syz [ 2150.336222][T27230] usb 2-1: config 0 descriptor?? [ 2151.065399][T27230] usb 2-1: USB disconnect, device number 56 [ 2151.172568][T28919] udevd[28919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 04:30:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f1c14f9f4070009ea000200200000000000000000000800020006000000", 0x24) 04:30:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:30:07 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 04:30:07 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) [ 2151.785595][T28928] binder: 28927:28928 ioctl c0306201 20001480 returned -14 04:30:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:30:07 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:30:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f1c14f9f4070009ea000200200000000000000000000800020006000000", 0x24) [ 2151.873076][T28928] binder: transaction release 123 bad object at offset 768, size 0 [ 2151.949982][T28928] binder: transaction release 123 bad object at offset 0, size 0 [ 2151.957795][T28928] binder: transaction release 123 bad object at offset 0, size 0 04:30:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f1c14f9f4070009ea000200200000000000000000000800020006000000", 0x24) [ 2152.008157][T28938] binder: BINDER_SET_CONTEXT_MGR already set 04:30:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) [ 2152.063473][T28938] binder: 28936:28938 ioctl 4018620d 20000000 returned -16 [ 2152.091311][T28942] binder: 28936:28942 ioctl c0306201 20001480 returned -14 04:30:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:30:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000000b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 04:30:08 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) [ 2152.289126][T28945] binder: BINDER_SET_CONTEXT_MGR already set [ 2152.301535][T28945] binder: 28944:28945 ioctl 4018620d 20000000 returned -16 [ 2152.322997][T28952] binder: 28949:28952 ioctl c0306201 20001480 returned -14 [ 2152.358217][T28945] binder: 28944:28945 ioctl c0306201 20001480 returned -14 [ 2152.413695][T28952] binder: transaction release 133 bad object at offset 768, size 0 04:30:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) [ 2152.467521][T28952] binder: transaction release 133 bad object at offset 0, size 0 [ 2152.502186][T28952] binder: transaction release 133 bad object at offset 0, size 0 04:30:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) [ 2152.654796][T28959] binder: 28958:28959 ioctl c0306201 20001480 returned -14 [ 2152.735071][T28959] binder: transaction release 139 bad object at offset 768, size 0 [ 2152.809628][T28959] binder: transaction release 139 bad object at offset 0, size 0 [ 2152.842940][T28961] binder: 28960:28961 ioctl c0306201 20001480 returned -14 [ 2152.862095][T28959] binder: transaction release 139 bad object at offset 0, size 0 [ 2152.903881][T28961] binder: transaction release 144 bad object at offset 768, size 0 [ 2152.932048][T28961] binder: transaction release 144 bad object at offset 0, size 0 [ 2153.022610][T28961] binder: transaction release 144 bad object at offset 0, size 0 04:30:09 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 04:30:09 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 04:30:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) write$binfmt_script(r1, 0x0, 0xd8) creat(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000540)='E', 0x1}], 0x1) [ 2162.184321][T28976] binder: 28975:28976 ioctl c0306201 20001480 returned -14 [ 2162.214768][T28976] binder: transaction release 149 bad object at offset 768, size 0 [ 2162.231885][T28976] binder: transaction release 149 bad object at offset 0, size 0 [ 2162.249194][T28976] binder: transaction release 149 bad object at offset 0, size 0 04:30:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:30:18 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 04:30:18 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 04:30:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 04:30:18 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 04:30:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) write$binfmt_script(r1, 0x0, 0xd8) creat(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000540)='E', 0x1}], 0x1) 04:30:19 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 04:30:19 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 04:30:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x20202, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) pipe(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) read(r1, &(0x7f00000001c0)=""/155, 0x9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x6, 0x1f, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x0, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r4, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x96a44f1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x96a44f1) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 04:30:20 executing program 5: r0 = socket(0x1, 0x2, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000), 0x2) 04:30:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x88, 0x66, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0x8) 04:30:21 executing program 5: syz_clone(0x840e5100, 0x0, 0x32, 0x0, 0x0, 0x0) [ 2165.141249][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.147735][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:30:21 executing program 5: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25150000000c00010000000000280000000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000100000a001a0008021100000000000a0006000802110000000010"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x8080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) io_setup(0x5ff, &(0x7f00000003c0)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r3, 0x2, &(0x7f0000000640)=[&(0x7f0000000180)={0x7000000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="02100000030000000200000000000000", 0x1002}]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x1e, 0x262) [ 2167.295880][T29016] syz-executor.5 (29016): drop_caches: 1 [ 2167.874886][T29016] syz-executor.5 (29016): drop_caches: 1 [ 2174.855125][T29022] binder: 29021:29022 ioctl c0306201 20001480 returned -14 [ 2174.887940][T29022] binder: transaction release 154 bad object at offset 768, size 0 [ 2174.905587][T29022] binder: transaction release 154 bad object at offset 0, size 0 [ 2174.927624][T29022] binder: transaction release 154 bad object at offset 0, size 0 04:30:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x300}}}], 0x0, 0x0, 0x0}) 04:30:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 04:30:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) write$binfmt_script(r1, 0x0, 0xd8) creat(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000540)='E', 0x1}], 0x1) 04:30:31 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x109ac2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xc800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x4010) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x2, {@loopback}}}], 0x28}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 04:30:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_dump={0x26, 0x80}}) 04:30:31 executing program 5: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25150000000c00010000000000280000000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000100000a001a0008021100000000000a0006000802110000000010"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x8080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) io_setup(0x5ff, &(0x7f00000003c0)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r3, 0x2, &(0x7f0000000640)=[&(0x7f0000000180)={0x7000000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="02100000030000000200000000000000", 0x1002}]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x1e, 0x262) 04:30:31 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmmsg$alg(r0, &(0x7f0000000a40)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7c, 0x60}], 0x2, 0x0) 04:30:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000002c0)=@chain) keyctl$get_persistent(0x16, 0x0, r0) 04:30:31 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000f00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 04:30:31 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000f00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 04:30:32 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000f00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 04:30:32 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000f00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') [ 2177.051509][T29034] syz-executor.5 (29034): drop_caches: 1 [ 2177.917776][T29034] syz-executor.5 (29034): drop_caches: 1 04:30:37 executing program 5: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25150000000c00010000000000280000000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000100000a001a0008021100000000000a0006000802110000000010"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x8080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) io_setup(0x5ff, &(0x7f00000003c0)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r3, 0x2, &(0x7f0000000640)=[&(0x7f0000000180)={0x7000000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="02100000030000000200000000000000", 0x1002}]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x1e, 0x262) 04:30:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) [ 2181.332728][T29050] binder: 29049:29050 ioctl c0306201 20001480 returned -14 [ 2181.347267][T29050] binder: transaction release 159 bad object at offset 768, size 0 [ 2181.356274][T29050] binder: transaction release 159 bad object at offset 0, size 0 [ 2181.365128][T29050] binder: transaction release 159 bad object at offset 0, size 0 04:30:37 executing program 0: syz_clone(0x42202000, &(0x7f0000000000)="d07ff174dc054dc7912c77667805afb34b0d9f26c646c313ff9a6a0746ed378c5745be5a1d55d8cb6ee6f69653702a53e0811f7b046496aa5834f4021d1ccdbdd9c6e165230a020026f1c8df7c25e95ba24ccf71bfb3287e8a831763f252b0be691e9553db780fcd5d23e07bd031a6b2d30740", 0x73, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) 04:30:37 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000005c0)) 04:30:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) write$binfmt_script(r1, 0x0, 0xd8) creat(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000540)='E', 0x1}], 0x1) 04:30:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="840000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="996e060000000000540012804f000100687372"], 0x84}}, 0x0) 04:30:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = dup2(r1, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x7c, 0x3f, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) 04:30:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = dup2(r1, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x7c, 0x3f, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) 04:30:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = dup2(r1, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x7c, 0x3f, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) 04:30:38 executing program 0: syz_clone(0x42202000, &(0x7f0000000000)="d07ff174dc054dc7912c77667805afb34b0d9f26c646c313ff9a6a0746ed378c5745be5a1d55d8cb6ee6f69653702a53e0811f7b046496aa5834f4021d1ccdbdd9c6e165230a020026f1c8df7c25e95ba24ccf71bfb3287e8a831763f252b0be691e9553db780fcd5d23e07bd031a6b2d30740", 0x73, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) 04:30:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) [ 2183.458666][T29061] syz-executor.5 (29061): drop_caches: 1 04:30:40 executing program 5: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25150000000c00010000000000280000000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000100000a001a0008021100000000000a0006000802110000000010"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x8080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) io_setup(0x5ff, &(0x7f00000003c0)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r3, 0x2, &(0x7f0000000640)=[&(0x7f0000000180)={0x7000000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="02100000030000000200000000000000", 0x1002}]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x1e, 0x262) 04:30:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = dup2(r1, r0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x7c, 0x3f, 0xff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) 04:30:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:40 executing program 0: syz_clone(0x42202000, &(0x7f0000000000)="d07ff174dc054dc7912c77667805afb34b0d9f26c646c313ff9a6a0746ed378c5745be5a1d55d8cb6ee6f69653702a53e0811f7b046496aa5834f4021d1ccdbdd9c6e165230a020026f1c8df7c25e95ba24ccf71bfb3287e8a831763f252b0be691e9553db780fcd5d23e07bd031a6b2d30740", 0x73, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) 04:30:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) [ 2184.782408][T29061] syz-executor.5 (29061): drop_caches: 1 [ 2186.720100][T29113] syz-executor.5 (29113): drop_caches: 1 [ 2188.183159][T29113] syz-executor.5 (29113): drop_caches: 1 [ 2202.275727][T29117] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:30:58 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "cb74c4b9", {0x3, 0x107}}) 04:30:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:58 executing program 5: unshare(0x8040000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0xd000) unshare(0xa000000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 04:30:58 executing program 0: syz_clone(0x42202000, &(0x7f0000000000)="d07ff174dc054dc7912c77667805afb34b0d9f26c646c313ff9a6a0746ed378c5745be5a1d55d8cb6ee6f69653702a53e0811f7b046496aa5834f4021d1ccdbdd9c6e165230a020026f1c8df7c25e95ba24ccf71bfb3287e8a831763f252b0be691e9553db780fcd5d23e07bd031a6b2d30740", 0x73, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) 04:30:58 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000002180)=""/181, 0xb5}], 0x1, 0x0, 0x0) 04:30:58 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x1000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1c00e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 2202.814188][T29153] device 00ªX entered promiscuous mode [ 2202.866501][T29153] device vlan2 entered promiscuous mode [ 2202.990430][T29153] device 00ªX left promiscuous mode 04:30:59 executing program 4: socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) getresuid(&(0x7f0000000280), 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) unshare(0x4a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1dd68f0821500000060000000400abdd78cfe1e500001810000025cdaf31fb49017bff550a81f7107f3656445beec44a3b452e0794dcd2387b9ffedc5852c0de63998f5a5333d6a82eebaa584b98212d6b66ca9b7df0d2d8e53ee4dc11f57165708fc4e4d15666461acb23180570c5dfa9d483fce9d6af720f0de7e0c3b7460a3bed4bd1dfba7a43a240dd32c20c6d", @ANYRES32], &(0x7f0000000840)='syzkaller\x00', 0xffff, 0x3e, &(0x7f0000000880)=""/62, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x0, 0x8, 0x3, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={0xffffffffffffffff, 0x0}, 0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x95, &(0x7f00000017c0)=""/149, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xa, 0x0, 0xadf}, 0x10, 0xffffffffffffffff}, 0x80) read$watch_queue(0xffffffffffffffff, &(0x7f00000007c0)=""/4096, 0x1000) open(&(0x7f0000000000)='./file1\x00', 0xc0681, 0x0) 04:30:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getnexthop={0x17, 0x6a, 0xa01}, 0x18}}, 0x0) 04:30:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:30:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_get$uid(0x2, 0x0) 04:31:03 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) 04:31:03 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/145, 0x91}], 0x1) 04:31:03 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) 04:31:03 executing program 2: io_setup(0x7, &(0x7f0000000080)=0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x4, &(0x7f0000001300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)='\t', 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="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", 0xffffffffffffff03, 0xaff1, 0x0, 0x2}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001440)="505aff81c8abb97b5872bcea60fb657e870276c85534e56c875fcc2c289288c531317e17e6fc98f4724b2176e6ec05d343cde4f4fe123cfc43fc823d9ed43858b0450274f3859ea116969454ff01afa757b25514507d22fdc92ed1c30712f7876973a9057f0f9c5ac4605296b90103803861a389ca9c7e01173d74f88eac07861a69da5ce518ea619fc3dd5af208e77b6abf4758707ba86f8da3e7d71f76c11a4ffb5de6261710fa632a526267eadae94ad0f89b33894ae6094a0302f227b5e5ee3730067baa58", 0xc7, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001280)="21f561e42f1b7ebe3a9684a227021dcb1955b641d46c95a69d6ce932f6495c35ac0ebfe4dd98009fe62cb8a5f8d5ff1e7805142328856524361d931472a1641c67e05821fca26027b8482f300d82f6ba28a8be06d7dcf3c7", 0x58, 0x3f, 0x0, 0x6}]) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) 04:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x400, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x8f9a28ec647e7119, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000580)) rmdir(&(0x7f0000000180)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f21830f01d1d927260f95f2360f01c8f3dd459966b9fb0a000066b84c00000066ba000000000f300f3265660fc774000fc72b", 0x33}], 0xaaaaaaaaaaaac90, 0x21, &(0x7f00000002c0), 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x68842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7bcf, 0x0, 0x0, 0x800000}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000034c0), 0x0, 0x0, 0x3) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)) ioctl$KVM_GET_NESTED_STATE(r3, 0x4138ae84, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x121402, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 04:31:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 04:31:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@remote, @in=@loopback}}]}, 0x50}}, 0x0) 04:31:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="1e6106d915f2f558c71fab6345ff9e74e2e9c9a399907f9d0107bfe78eb8dc4f32960c2774bf6de020", 0x29, r0) 04:31:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) [ 2207.930323][T29197] trusted_key: encrypted_key: master key parameter '' is invalid 04:31:04 executing program 0: getpid() mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 04:31:04 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "f34f0b8babef4686fab97bc5e19d0290787024a0"}}}}}, 0x0) [ 2208.460533][ T27] audit: type=1326 audit(1676867464.576:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29176 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x7fc00000 04:31:17 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:31:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 04:31:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) 04:31:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290209058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000200)={0x0, 0x0, 0x36, {0x36, 0x0, "c0bb9f0d1d38468e82126f9dacf6084112e4e50872c574811889c20b6b47f9313daf8b1f22887cde6a2a1be2e12ea5435d09af8a"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:31:17 executing program 0: r0 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, &(0x7f0000000040)=0x1d) 04:31:17 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:31:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r0, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x1a2, 0x284, 0x7, 0x312, 0x7}, "748fae3b38244b28ef92ab83d85b09cddb104377f9c2a0c5badc5d4efdd9a5058e00df996adc975fe76f7e50b105a5d524e97a0e43825761050356830160e83be9f88436b8c9d4167421f5fb2a426cd244ce47a04eebde1a277cfaa317a47b2bd8bc92d577b403ba123e942354cdb6d4a2af0dc6eb90a5acfae3aa21eb6a98d47358571879b4908447bd50dac1eb315562cbef0031cd9f571b0dba465e29b909c1f39cf167b4d16877a2bae6236a55da19dac6bf3950017b3b46c21357b7aedfe8cfcc0abb328084d8f146", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7eb) 04:31:17 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x3, 0x20000000, 0x1000000000005}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x3, 0x0, 0x1000000000005}) 04:31:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 04:31:17 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x168) fallocate(0xffffffffffffffff, 0x48, 0x0, 0x2811fdff) creat(&(0x7f0000000280)='./bus/file0\x00', 0x326) io_setup(0x202, &(0x7f0000000200)) socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x29, &(0x7f00000002c0)={@local, @multicast2, @private=0xa010100}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syncfs(r3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200000002) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004106) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7], 0xc63b9e35) 04:31:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047454, &(0x7f0000000100)) 04:31:17 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_setup(0x1d, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000001480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="7b0f2b9aa804cb2990a43fc9cf8df16e", 0x10}]) [ 2221.359202][T27515] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2221.729340][T27515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2221.752482][T27515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2221.792637][T27515] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2221.819590][T27515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.852653][T27515] usb 4-1: config 0 descriptor?? [ 2222.210911][ T27] audit: type=1326 audit(1676867478.326:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29218 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x7fc00000 [ 2222.340430][T27515] hid (null): unknown global tag 0x41 [ 2222.569098][T27515] usb 4-1: string descriptor 0 read error: -71 [ 2222.589247][T27515] uclogic 0003:5543:0047.0037: failed retrieving string descriptor #200: -71 [ 2222.599473][T27515] uclogic 0003:5543:0047.0037: failed retrieving pen parameters: -71 [ 2222.630465][T27515] uclogic 0003:5543:0047.0037: failed probing pen v2 parameters: -71 [ 2222.660445][T27515] uclogic 0003:5543:0047.0037: failed probing parameters: -71 [ 2222.692333][T27515] uclogic: probe of 0003:5543:0047.0037 failed with error -71 [ 2222.729551][T27515] usb 4-1: USB disconnect, device number 114 [ 2226.582480][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.588852][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:31:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106313}], 0x0, 0x0, 0x0}) 04:31:30 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:31:30 executing program 2: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080), 0x80801, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@unlock_all, 0xb) 04:31:30 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 04:31:30 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:31:30 executing program 3: r0 = openat$sndtimer(0xffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, 0x0) [ 2234.069501][ T27] audit: type=1326 audit(1676867490.186:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ffc549 code=0x7fc00000 04:31:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004500)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='oom_adj\x00') r4 = getpid() sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x1, 0x2) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000500)=""/223, 0xdf}], 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) r7 = socket$inet(0x2, 0x1, 0x0) shutdown(r7, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x20000000) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) 04:31:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000006700)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x10}, @val={0xc, 0x99, {0x3}}}}, [@NL80211_PMSR_ATTR_PEERS={0xe5c, 0x5, 0x0, 0x1, [{0x6e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x348, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x35c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x508, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x26c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}]}]}]}, 0xe84}}, 0x0) [ 2234.138420][T29258] binder: 29255:29258 unknown command 1074815763 [ 2234.166554][T29258] binder: 29255:29258 ioctl c0306201 20000380 returned -22 04:31:30 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0xac666000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x40, 0x7, 0x4d9, 0x654, {{0x1c, 0x4, 0x1, 0x16, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x23, 0x13, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @empty]}, @generic={0x94, 0x12, "eb5a909e34b0fbf9ced214aa1ad9907e"}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x3, [{@multicast2, 0x7}, {@multicast2, 0x6}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=@delqdisc={0x80, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x4}, {0x7, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5322}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x14}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2b7, 0xffffffff, 0x0, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5e}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x58200}}, 0x24000045) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r3, 0x401, 0x0, 0x6}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x9, 0xf}, {0x6}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x1bbc}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xae1c}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040090) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x2, 0x3, 0x3) getsockopt$sock_timeval(r7, 0x1, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000b0f0000008bfbbc6e0060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001007072696f000000001800020004"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48008) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004000)=@newtfilter={0x30b0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x307c, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x2cd8, 0x2, [@m_connmark={0x15c, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xffff, 0x81}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcbd56b8, 0x2, 0x5, 0x60, 0x10001}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffff7f, 0x20000000, 0x5e, 0xfffffff8}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x2, 0x6, 0x8, 0x4}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5c1, 0xffffffffeffffffe, 0x40, 0x1800}, 0x7fff}}]}, {0x9e, 0x6, "7e3e7cab88877830663760db735b699d6a5cc9680c7f1ab917cc593da2e403b88d5273cd877893c92709e7488b6ba0a57a95109bdefcec8095c13276167ec3a1ef85f4ca383f31b79c6e48dbfd31922c2c439b4de54a1010670cfcba035380a5f3cf6389ba9391723bda5fc2eb4935435fde9d3653f99d58ed3ac6a4709412852d6a87646a9580c3fba1ffb973bcb988469662b0b45491ff611b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x940, 0x1b, 0x0, 0x0, {{0xb}, {0x904, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x3ff, 0x6, 0x9, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x26, 0x8, 0x8, 0x0, 0x3f, 0x9566, 0x8000, 0x80000000, 0xffff, 0x7, 0x6, 0x1d40, 0x0, 0x7ff, 0x3, 0x3743, 0x0, 0x6, 0x3, 0x10000, 0x40, 0x3, 0x8001, 0x0, 0xfffffffd, 0x3, 0x0, 0x6, 0x0, 0x1, 0xfffffffd, 0x6, 0x200, 0x3f, 0x80, 0x5, 0x0, 0x1, 0x8, 0x7, 0x8001, 0xffffffd7, 0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x7fffffff, 0x86, 0xfffffffd, 0x6, 0x6, 0x9ea1, 0x0, 0x9, 0x101, 0x1f, 0xc6, 0x4, 0x9, 0x7f, 0x0, 0x4, 0x4, 0x5, 0x9, 0xffffff00, 0x3, 0x6, 0x5, 0x8, 0x200, 0x1bad, 0x9b04, 0x9, 0x800, 0xcfc, 0xc1e, 0x3ff, 0x400, 0x3, 0x0, 0x4, 0x3, 0x7fff, 0x0, 0x3, 0x166, 0x0, 0x3, 0x0, 0x7, 0x7f, 0x383a1b0a, 0x8, 0xcf8, 0x51, 0x10000, 0x8de8, 0x3, 0x7b9, 0xffffffff, 0x0, 0xfffffffb, 0x800, 0x8001, 0x7, 0x8ff, 0x10001, 0x3903, 0x804, 0x2, 0x101, 0x5, 0x8, 0x101, 0x3, 0x412b, 0x4, 0x7, 0x0, 0x4, 0x6, 0x6, 0x6, 0x5, 0x1, 0xffff, 0xc0, 0x10000, 0xfffffffd, 0xffffffff, 0x6, 0xfd8a, 0x1, 0x0, 0x2, 0x5, 0x401, 0x80000000, 0x40, 0x0, 0x1, 0xd67a, 0x9, 0x200, 0x493b87f4, 0x6, 0x7a9, 0x3, 0x5, 0x4ae0, 0x8, 0x3ff, 0x6b5, 0x800, 0x6, 0x9, 0x2, 0xa3b, 0x9, 0xfcf, 0x3f, 0x3f, 0x80, 0xd6, 0xea, 0xb8, 0x6ff6, 0x100, 0x1, 0x297, 0x80, 0xb3f3, 0x9, 0x81, 0x200, 0x81c1, 0x9, 0x9, 0xffffd9a6, 0xb4, 0x3, 0x0, 0x0, 0x9, 0x1000, 0x7ff, 0x7f, 0x1, 0x80, 0x7, 0x7ff, 0x9a68, 0x5, 0x5, 0x8001, 0x40, 0xbb5, 0x9, 0xff, 0xffff, 0x2, 0xfffffff9, 0x6, 0x4, 0x81, 0x6e13, 0x3, 0x10001, 0x4, 0x859e, 0x6, 0x7e1, 0x80000000, 0x9, 0x4, 0x2, 0x624, 0x1ff, 0x80000000, 0xfdd, 0x80000000, 0x3, 0x4, 0x80000000, 0x6, 0x3, 0xffffffff, 0x0, 0x4a5, 0x4, 0x9, 0xfff, 0x3ff, 0x9, 0x2, 0x20, 0x6, 0x10001, 0x9, 0xe9f0, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x3, 0x31800, 0xe2, {0x0, 0x2, 0x7, 0x8, 0x800, 0x20}, {0x4, 0x2, 0x1f, 0x21, 0x0, 0xee}, 0x5, 0x5, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x3, 0x1f, 0x0, {0x1f, 0x2, 0x3, 0x4, 0x14ad, 0x4}, {0x7, 0x0, 0x0, 0xff, 0x3, 0x4}, 0x8, 0xfffff209, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2da}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x1, 0x8, 0x7f, 0x2751, 0x8, 0x68e3, 0x1ff, 0xfffffff7, 0x480, 0x5, 0xffffffff, 0x8000, 0x401, 0x3d4, 0x80000001, 0x6, 0x0, 0x2, 0x100, 0x6, 0x800, 0x2, 0x7, 0x526, 0x3, 0x10000, 0x1976e859, 0x4, 0x451, 0x3, 0x0, 0x0, 0x3, 0x2, 0x41, 0x1, 0x1, 0x80, 0x5, 0x3, 0x4, 0xd7f, 0x1000, 0x5, 0x352e, 0x5, 0x0, 0x9, 0x40, 0xffffffff, 0x1, 0x10000, 0x3, 0xfffffff7, 0xc0fa, 0x1, 0x3, 0x0, 0x20, 0x3, 0x1f, 0x4, 0x1000, 0x7, 0x2, 0x9, 0x24000, 0x2, 0x76ae8c6e, 0xc8e1, 0x4, 0x7d3, 0x9, 0x6, 0x322a, 0x8, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x8, 0x1, 0xffffff27, 0x1f, 0x9, 0x0, 0x4, 0xb4c1, 0x6, 0x8, 0x0, 0xe00000, 0x2, 0x6, 0xffffffff, 0x7, 0x3, 0x3f, 0x2, 0x10001, 0x40, 0x2b1, 0x10000, 0x1, 0x1, 0x1, 0x7ff, 0xc203, 0x6, 0x5, 0xfffffff7, 0x7, 0x5, 0x80000001, 0x1, 0x5, 0x10000, 0x5, 0x4a4, 0xffffb38c, 0x4, 0xff, 0x8001, 0x3, 0x400, 0x6a3c3506, 0xfffffff8, 0x6, 0x9, 0x501, 0x20, 0x80000001, 0x9, 0x81, 0x7, 0x80000000, 0x9, 0x5, 0x3, 0x7, 0x88, 0x6, 0x7fff, 0x8, 0x6, 0x3ff, 0x6, 0xfffffff9, 0x94e, 0x4, 0x7, 0x80, 0x1, 0xdad, 0x9, 0x968, 0x5, 0x40, 0xf, 0xd36, 0x1f, 0x1, 0x5, 0xf8, 0x1, 0x4, 0x7, 0xff, 0x9f91, 0x59e, 0x4, 0x8, 0x2, 0x1, 0x7fd7, 0x80000001, 0x80, 0x9, 0x5e5, 0x3, 0x10001, 0x5, 0x7, 0xfffffffa, 0x68e, 0xbe, 0x4, 0x80000000, 0x1f, 0x3, 0x40, 0x4, 0x6, 0x505, 0x0, 0x7fff, 0x100, 0x8, 0xffff, 0x0, 0x5, 0xf2, 0x1, 0xfa22, 0x7, 0x5, 0x3, 0x0, 0x5, 0x7, 0x4, 0x4, 0x8001, 0x2, 0x6, 0x7ff, 0x2, 0x3, 0x2, 0x5, 0x1, 0x1, 0x7, 0x101, 0xde, 0x1ff, 0x3, 0x3, 0x3b4b, 0x3, 0xfffffffe, 0x40, 0x0, 0x9, 0x0, 0x4, 0xff, 0x7f, 0x2, 0xff, 0x3, 0x5c6a, 0x8, 0x9d, 0x1, 0x8, 0x1, 0xc81, 0x800, 0x0, 0x0, 0x10001, 0xd959]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5722}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x65c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE64={0xc}]]}, {0x13, 0x6, "20511649a73ad34cb806dd4b157b48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x74, 0x9, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x1, 0x2, 0x8}}]}, {0x31, 0x6, "c9066a82f90d46427b8c1ab49e820258898f5ca8ac7c8601e374c9ff5bb0e19c82d18a4020cd1540e1f1ef68e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xcc8, 0x20, 0x0, 0x0, {{0xb}, {0xc6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x7, 0x0, 0x1, 0x8, 0x20, 0x7, 0x3, 0x8001, 0x0, 0xb6c3, 0x177, 0x1, 0x6d, 0x0, 0x8, 0x400, 0x8ef4, 0x5, 0x80, 0x81, 0xa95, 0x3, 0x5, 0x3, 0x60e2b0ef, 0x4, 0x400, 0x800, 0x1, 0x7fffffff, 0x9, 0x9d44, 0x9, 0x6, 0x1, 0x800, 0x80000000, 0x8c, 0x6, 0x10000, 0x16cd, 0x20, 0xffffffff, 0x9, 0x20000, 0x8, 0xfffffffe, 0x611, 0x7, 0x10000, 0x2, 0x9, 0x10001, 0x4, 0x4, 0x3ff, 0x58f7, 0xffff, 0xfffff8c1, 0x3, 0x8, 0x24f, 0x7, 0x80, 0x4, 0x9, 0x0, 0x1, 0x7f, 0x1f0, 0x40000, 0x88df, 0x5e82, 0x6, 0x4, 0x6, 0x624, 0x5, 0x7, 0x1, 0x6, 0x6, 0x20, 0x1, 0x1f, 0x1, 0x7f, 0x6, 0x1, 0x5, 0x401, 0x727, 0x80000001, 0x1, 0x8, 0x0, 0x0, 0x9, 0x200, 0x1, 0xa6ff, 0x80, 0x6, 0x64, 0x0, 0x124, 0x100, 0x9, 0x5881, 0x3, 0x3, 0x7, 0xa7b2, 0x6, 0xdceb, 0x100, 0x81, 0x5, 0x0, 0x8000, 0x1, 0x2, 0x7f, 0x4, 0x1, 0x4, 0xffff0001, 0x4ee8, 0x0, 0x7f, 0x8, 0xffffffff, 0x20, 0x9, 0x0, 0xffffffff, 0x7, 0x0, 0x6b7, 0xa9, 0x200, 0x9, 0x7ff, 0xfffff801, 0x6, 0xffffffe1, 0xcb, 0x3, 0x2, 0x5, 0x6, 0x8001, 0x2, 0x4, 0x7, 0x63, 0x800, 0x7, 0x8001, 0x401, 0x9, 0x1, 0x1, 0x9c, 0x400, 0x30c0, 0xff, 0x4, 0x3, 0x200, 0x9, 0x0, 0x6, 0xc57, 0x7, 0x7213, 0x1, 0x7fff, 0x4, 0x46d0, 0x3, 0x7fff, 0x0, 0xffffff77, 0x7, 0xfffffffe, 0x0, 0x7fffffff, 0x7fffffff, 0x4, 0x6bb, 0x1, 0x8, 0x9, 0x8, 0x0, 0x81, 0x5, 0x7, 0xffffffff, 0x7d07d7e, 0x1, 0x80000, 0x1f, 0x0, 0x0, 0x5, 0x8, 0x3, 0x5, 0x1, 0xfffffffd, 0x8, 0x108, 0x8001, 0x7, 0xb12, 0x1, 0xffff, 0x4, 0x5, 0xd0d4, 0x699, 0x3, 0xd15f, 0xfffffffe, 0x34, 0xc3ce, 0x7fff, 0x7, 0x5, 0x0, 0x6, 0x1000, 0xb4, 0x8, 0x33, 0x129, 0x400, 0xfffffffd, 0xffffffff, 0x2a8e, 0x7fff, 0x0, 0x1000, 0xaef, 0x1f, 0x6e, 0xd49a, 0x8, 0x6, 0x8000, 0x100, 0x10001, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x44, 0xc164, 0x9, 0x873, 0x9, 0xfffffeff, 0x9, 0xf039, 0x7fff, 0x8, 0x295, 0x7, 0x5, 0x10001, 0x3, 0x0, 0x800, 0x3e3, 0xffffffff, 0x3, 0x0, 0x7f, 0x5, 0x3f, 0x9a, 0xf, 0x6, 0x6, 0x240000, 0x8001, 0x6, 0x1, 0x5, 0xb74, 0x7fff, 0x6, 0xf286, 0x6, 0xfffffffb, 0x3f, 0x7, 0x3, 0x6, 0xfffffff8, 0x9, 0x8, 0x5, 0x8, 0x8001, 0xfffffffd, 0x6cdf, 0x2, 0x1000, 0x8, 0x80000000, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2d1f, 0x9, 0x108, 0x1, 0x8, 0x4, 0x1ff, 0x1d2, 0x7, 0x14ba, 0x535, 0x6, 0x8, 0xffff, 0x3, 0xc3f0, 0x0, 0x0, 0x101, 0x0, 0xce2, 0x1000, 0x3, 0x7, 0xc4b4, 0xfffffc01, 0x6, 0x80000001, 0x78c, 0x0, 0x6, 0xffff, 0x3f, 0x7, 0xfff, 0x5, 0x55, 0x1000, 0x6, 0x4, 0x0, 0x401, 0x5, 0x7, 0xfffffff9, 0x7fffffff, 0x5bffe502, 0xfffffeff, 0xffff3da8, 0x1, 0x80000000, 0x80000000, 0x1ff, 0x8000, 0x5, 0x7, 0xd02b, 0x20, 0x400, 0x135, 0x6, 0x8, 0x1, 0xfffffa16, 0x9, 0x1, 0x4, 0x1, 0x4c0, 0x2, 0x3, 0xffff1f59, 0x2, 0x3f, 0x5, 0x8, 0x7, 0x6, 0x2cb1, 0x2, 0xe7, 0x50942a25, 0x453a86c2, 0x2, 0xd4, 0x400, 0x400, 0x9, 0xd4, 0x7, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x0, 0x7, 0x8000, 0x81cd, 0xf1, 0xffffffc1, 0x3, 0xce3, 0xfffeffff, 0x3ff, 0x80, 0x3, 0xf6d, 0x9, 0xfffffff8, 0x5, 0x3, 0x400, 0x7ff, 0x9, 0xb7e3, 0x0, 0x2, 0x0, 0x4, 0x10001, 0xfffffff7, 0x7ff, 0x9, 0x0, 0x1c6f, 0x8001, 0x2, 0x200, 0x6be9, 0x7f, 0x100, 0x1, 0x3ff, 0x615, 0x5fd, 0x5, 0x3, 0x80, 0xa1f5, 0x60a8, 0x4, 0x3ff, 0x9, 0x6b, 0x0, 0x9, 0x4, 0xa00, 0x8961, 0x0, 0x2, 0x1, 0x8, 0x100, 0xffff24ac, 0x79d9, 0x8, 0x4214, 0x8, 0x7861, 0x3, 0x81, 0x400, 0x1ff, 0x7, 0xd38, 0x1000, 0x3ff, 0x5, 0x4, 0x5f6a, 0x80000000, 0x9, 0x2, 0x33, 0x8, 0x0, 0x0, 0x4ae, 0x6, 0x9, 0x6, 0x1, 0x0, 0x20000000, 0x2, 0x4, 0x1, 0x1b17, 0xf7, 0x2, 0x401, 0xff, 0x3c59]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8ab, 0xfffffffe, 0x6, 0x5, 0xee38, 0xa4, 0x6, 0x8, 0x8, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x1000, 0x401, 0x101, 0x0, 0x8, 0xffffffa8, 0xb2e4, 0x9, 0x20, 0xff, 0x6, 0x10001, 0x3, 0x200, 0x9, 0x9273, 0x8000, 0xe56, 0x4, 0xfffffeff, 0x913b, 0x7, 0x7, 0x3, 0x2, 0x8, 0x6, 0x40, 0x80, 0x6, 0x7fffffff, 0x833, 0x7, 0x8001, 0x4, 0x9, 0xfff, 0x5, 0x52b9, 0xc5c, 0x35f19359, 0x5f, 0x162a, 0x5, 0x10000, 0xb567, 0xfffffffe, 0x7, 0x0, 0x5, 0x80000000, 0xec9d, 0x0, 0x800, 0x800, 0x7fffffff, 0x7fffffff, 0x100, 0x6, 0x3ff, 0xc6bc, 0x34d24f5c, 0x9e5, 0xfe, 0x8, 0x54, 0xfffffffc, 0x2, 0x800, 0x3, 0x4, 0xa40a, 0xa662, 0xd1, 0xd2, 0x6, 0x20, 0x6, 0x7fff, 0x0, 0x400, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0xff, 0x8, 0x2, 0x1000, 0x9, 0x20, 0x5e6, 0x3f, 0x9352, 0x800, 0x5, 0x401, 0x80000000, 0x4, 0x4, 0x6, 0x2, 0x401, 0x6, 0x40, 0x4, 0x2, 0x81, 0x2, 0x9, 0x3f, 0xffff1306, 0x0, 0xffff, 0x9, 0xe3, 0x9, 0x4, 0x6, 0x0, 0x3, 0xfffffff7, 0x5, 0x4, 0x1, 0x0, 0xc34d, 0x2, 0x80, 0x10, 0x6, 0x200, 0xfe8, 0x5, 0x3, 0x8f7, 0x1, 0x0, 0xfff, 0x1, 0x10000, 0x6, 0x401, 0xe7c3, 0xffff16a8, 0x6, 0x0, 0x2, 0x1, 0x7, 0xfffffffd, 0x3, 0x3, 0x29b, 0xff, 0x7, 0x7fff, 0x7, 0xfffffffd, 0x6, 0x2, 0x3ff, 0x8803, 0x7fffffff, 0x1, 0xff, 0x1f, 0x81, 0x81, 0x5, 0x80000001, 0x8001, 0x40, 0x2, 0x1819, 0x8, 0x6, 0x8, 0x0, 0x8001, 0xfffffff7, 0xfff, 0x7f, 0xfffffff7, 0xffffff80, 0x101, 0x3, 0x5, 0x1000, 0xffffffff, 0x6, 0x0, 0x100, 0x1, 0x2, 0x6, 0x8, 0x7f, 0x4, 0xf9, 0x4, 0x7, 0x1, 0x10001, 0x8001, 0x7, 0x84, 0x200, 0x1, 0x0, 0x1, 0x7, 0x6, 0xb08, 0x4, 0x10001, 0x9ae5, 0x4, 0x294e, 0x3ff, 0x97, 0x6, 0x2, 0x6, 0x1, 0x40, 0x3, 0x8, 0x56, 0x25cfdd7b, 0x972, 0x0, 0xe68, 0x3, 0x1, 0x7, 0x5, 0xfffffffb, 0xffffff81, 0x6, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x33, 0x6, "08ee66eee7556081bfe19575eb071dabaf7b477b0e72be1f628227577771d0ed7f9b7093ce9d93e26168015645e7b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x154, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x63, 0x1f, 0x6, 0x2, 0xb4ba}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}]}, {0xe7, 0x6, "d87a34bc07d07d771acecb62c75b65ef50f1b0cf84809ab2add296653a0051282f9614fd8f72a6ca918d0c0dc8cd3fe00449e98c023cc9bf02a56797a743cce2b986086f82b06471199f16d65f3199882aaed5f35863ebef7b3fd6109d70f0e85759e7d5a12fab8f779baa92f28e198cab062bebcc0a97ccce6965fd70b8ede358d25b2493714d3deb63c9025827a0b8c2702e197f76d109a702794fd598cf9f77341ea65faa968ce7e05a9a96ef095d3b99d73d1aaea3ac41e7dbef733c2a5f7f746413cc7d7719b45b41e6ba2a78a7abaefcfecf649f7e4914bccd38b2a992fe3805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x188, 0xe, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xa4, 0xd, 0x76b5, 0x81}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0x3, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8d5, 0x3, 0x800, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x7, 0x101, 0x7ff}, 0x39}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xad, 0x10000000, 0x860, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0xf4, 0x583f}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x2, 0x758, 0xb5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2c, 0x6, 0x10000000, 0x40, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x5, 0x2, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x4, 0x5, 0x3341e7e2}, 0x7f}}]}, {0x3f, 0x6, "bc6cca53ee934de92dcc774a36ed326af872d0983384c0f4f6651502d84e23e3eb90f2ecadf0b0620fa71a4af093f3ae531021d0f22e23de0fdbad"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ctinfo={0x10b0, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x296, 0x7fff, 0x7, 0x4, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1ff, 0x8000, 0x6, 0x3ff, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfb7, 0x0, 0x1, 0x1000, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xcbd}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x700d0b1399c71ca1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x64, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "ecc952d1a7a194e3be26ff3d0f498e14a4ab02fb9dc8581b9731d693a5dab00dbad78294670f43062b5c09046b2e1b7ae727ed911cc217"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x10c, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf2b, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x166c, 0xffffffffffffffff}}]}, {0xc5, 0x6, "268cd7b56bc2456bff7942deb2640bad08d7f050a1a0e5375462f2e8b31d07874b3e9cb0723eee7eb36d1bca5d445ef29d6fbfbb1ba32b03d82d8d10bf8692f30c2b2be5eba2bc7a5392bf2698d74b5566aeafd200463d32a656fd04f1df5cabd269dcef308ffc50842c5418dae500cf592302038c6780980157faae2249b49ebd34cd488c3b8b0eb871f69ec0c133c9beef35773a0d8d7531201ec4aef095bfa2132dfd9ec1f245d02c92ce10966805191cc874e3f636fdf8269e3bd3655a0236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xbbc18ec07321938, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x384, 0x2, [@m_mpls={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xc8}, @TCA_MPLS_TTL={0x5, 0x7, 0xe0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x79b25}]}, {0x65, 0x6, "39505238f7cfef51d6f05254463af84c2ac0f3a7a5c78fa036cdc8e62d9912e78c040456005ffa0b7b33468138251d61633905fd9e06989a26d31221943c5625cf64af46d3bd344c774a008afada820a77281746aaac8561ebe7fc8f8082476540"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x3e, 0x5, 0x6}, {0x7f, 0x7, 0x5, 0x6}, {0x0, 0x1, 0x81, 0xffff0001}, {0x8, 0x40, 0x5, 0xfb}, {0x3, 0x2, 0x2, 0x3}, {0x0, 0x6, 0x20, 0xfffffffb}, {0x1, 0x6, 0x1, 0x6}, {0xffff, 0x3f, 0x80, 0x3238054e}]}]}, {0xb7, 0x6, "ffe465cae83f3974a8e6e8d3624ed8883a19750d4f07143a726cb87a425dc21000633df3b9d448ea8e75217213dedd7ef28f415f8e65111231f39bbde284f5609534de6ff08b54b31e485699b130486ceae1a67d8e6cb6e389e9055fdde1c11e43793c4579f60ef03a196c0d81f037a0a3bc5b6dbaaa21c7768aef736fdbf648f4bedbace3f2ef8d1afa0ca63591830dc8e74281dc0abf7321906619d5dea51391b905b5b2bddedaea7b165f4cc4e96827dba2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffde, 0x496, 0x2, 0x3ff, 0x4}}]}, {0x3a, 0x6, "ab249372bf78ab78045205b0d69be58be177e03a6e7b17d16cab95bfd9497296ccdc368f004636923354e6712700d5d2f7701e40c165"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xef35, 0xd85, 0x8, 0x3c7, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7f, 0x2, 0xfffffffe, 0xa17f}, @multicast2, @rand_addr=0x64010100}}]}, {0x53, 0x6, "47baf38f314c3a74f830ad8f7fbfcfe4888905b1caba51ba1bbe09433aa136fcba1c31837b7ea27332b96b19134aa1a1e54ee911fe647b678e18008588dfc2fcef7740f37f27cad0501160a71883e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x4c, 0xf, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x11, 0x6, "567ad65c3749d004b67565ef5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xb}}]}}]}, 0x30b0}}, 0x0) 04:31:30 executing program 0: syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2234.313506][T29269] netlink: 111 bytes leftover after parsing attributes in process `syz-executor.3'. 04:31:30 executing program 3: r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f00000000c0)) 04:31:30 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0xac666000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x40, 0x7, 0x4d9, 0x654, {{0x1c, 0x4, 0x1, 0x16, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x23, 0x13, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @empty]}, @generic={0x94, 0x12, "eb5a909e34b0fbf9ced214aa1ad9907e"}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x3, [{@multicast2, 0x7}, {@multicast2, 0x6}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=@delqdisc={0x80, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x4}, {0x7, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5322}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x14}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2b7, 0xffffffff, 0x0, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5e}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x58200}}, 0x24000045) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r3, 0x401, 0x0, 0x6}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x9, 0xf}, {0x6}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x1bbc}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xae1c}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040090) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x2, 0x3, 0x3) getsockopt$sock_timeval(r7, 0x1, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000b0f0000008bfbbc6e0060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001007072696f000000001800020004"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48008) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004000)=@newtfilter={0x30b0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x307c, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x2cd8, 0x2, [@m_connmark={0x15c, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xffff, 0x81}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcbd56b8, 0x2, 0x5, 0x60, 0x10001}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffff7f, 0x20000000, 0x5e, 0xfffffff8}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x2, 0x6, 0x8, 0x4}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5c1, 0xffffffffeffffffe, 0x40, 0x1800}, 0x7fff}}]}, {0x9e, 0x6, "7e3e7cab88877830663760db735b699d6a5cc9680c7f1ab917cc593da2e403b88d5273cd877893c92709e7488b6ba0a57a95109bdefcec8095c13276167ec3a1ef85f4ca383f31b79c6e48dbfd31922c2c439b4de54a1010670cfcba035380a5f3cf6389ba9391723bda5fc2eb4935435fde9d3653f99d58ed3ac6a4709412852d6a87646a9580c3fba1ffb973bcb988469662b0b45491ff611b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x940, 0x1b, 0x0, 0x0, {{0xb}, {0x904, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x3ff, 0x6, 0x9, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x26, 0x8, 0x8, 0x0, 0x3f, 0x9566, 0x8000, 0x80000000, 0xffff, 0x7, 0x6, 0x1d40, 0x0, 0x7ff, 0x3, 0x3743, 0x0, 0x6, 0x3, 0x10000, 0x40, 0x3, 0x8001, 0x0, 0xfffffffd, 0x3, 0x0, 0x6, 0x0, 0x1, 0xfffffffd, 0x6, 0x200, 0x3f, 0x80, 0x5, 0x0, 0x1, 0x8, 0x7, 0x8001, 0xffffffd7, 0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x7fffffff, 0x86, 0xfffffffd, 0x6, 0x6, 0x9ea1, 0x0, 0x9, 0x101, 0x1f, 0xc6, 0x4, 0x9, 0x7f, 0x0, 0x4, 0x4, 0x5, 0x9, 0xffffff00, 0x3, 0x6, 0x5, 0x8, 0x200, 0x1bad, 0x9b04, 0x9, 0x800, 0xcfc, 0xc1e, 0x3ff, 0x400, 0x3, 0x0, 0x4, 0x3, 0x7fff, 0x0, 0x3, 0x166, 0x0, 0x3, 0x0, 0x7, 0x7f, 0x383a1b0a, 0x8, 0xcf8, 0x51, 0x10000, 0x8de8, 0x3, 0x7b9, 0xffffffff, 0x0, 0xfffffffb, 0x800, 0x8001, 0x7, 0x8ff, 0x10001, 0x3903, 0x804, 0x2, 0x101, 0x5, 0x8, 0x101, 0x3, 0x412b, 0x4, 0x7, 0x0, 0x4, 0x6, 0x6, 0x6, 0x5, 0x1, 0xffff, 0xc0, 0x10000, 0xfffffffd, 0xffffffff, 0x6, 0xfd8a, 0x1, 0x0, 0x2, 0x5, 0x401, 0x80000000, 0x40, 0x0, 0x1, 0xd67a, 0x9, 0x200, 0x493b87f4, 0x6, 0x7a9, 0x3, 0x5, 0x4ae0, 0x8, 0x3ff, 0x6b5, 0x800, 0x6, 0x9, 0x2, 0xa3b, 0x9, 0xfcf, 0x3f, 0x3f, 0x80, 0xd6, 0xea, 0xb8, 0x6ff6, 0x100, 0x1, 0x297, 0x80, 0xb3f3, 0x9, 0x81, 0x200, 0x81c1, 0x9, 0x9, 0xffffd9a6, 0xb4, 0x3, 0x0, 0x0, 0x9, 0x1000, 0x7ff, 0x7f, 0x1, 0x80, 0x7, 0x7ff, 0x9a68, 0x5, 0x5, 0x8001, 0x40, 0xbb5, 0x9, 0xff, 0xffff, 0x2, 0xfffffff9, 0x6, 0x4, 0x81, 0x6e13, 0x3, 0x10001, 0x4, 0x859e, 0x6, 0x7e1, 0x80000000, 0x9, 0x4, 0x2, 0x624, 0x1ff, 0x80000000, 0xfdd, 0x80000000, 0x3, 0x4, 0x80000000, 0x6, 0x3, 0xffffffff, 0x0, 0x4a5, 0x4, 0x9, 0xfff, 0x3ff, 0x9, 0x2, 0x20, 0x6, 0x10001, 0x9, 0xe9f0, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x3, 0x31800, 0xe2, {0x0, 0x2, 0x7, 0x8, 0x800, 0x20}, {0x4, 0x2, 0x1f, 0x21, 0x0, 0xee}, 0x5, 0x5, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x3, 0x1f, 0x0, {0x1f, 0x2, 0x3, 0x4, 0x14ad, 0x4}, {0x7, 0x0, 0x0, 0xff, 0x3, 0x4}, 0x8, 0xfffff209, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2da}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x1, 0x8, 0x7f, 0x2751, 0x8, 0x68e3, 0x1ff, 0xfffffff7, 0x480, 0x5, 0xffffffff, 0x8000, 0x401, 0x3d4, 0x80000001, 0x6, 0x0, 0x2, 0x100, 0x6, 0x800, 0x2, 0x7, 0x526, 0x3, 0x10000, 0x1976e859, 0x4, 0x451, 0x3, 0x0, 0x0, 0x3, 0x2, 0x41, 0x1, 0x1, 0x80, 0x5, 0x3, 0x4, 0xd7f, 0x1000, 0x5, 0x352e, 0x5, 0x0, 0x9, 0x40, 0xffffffff, 0x1, 0x10000, 0x3, 0xfffffff7, 0xc0fa, 0x1, 0x3, 0x0, 0x20, 0x3, 0x1f, 0x4, 0x1000, 0x7, 0x2, 0x9, 0x24000, 0x2, 0x76ae8c6e, 0xc8e1, 0x4, 0x7d3, 0x9, 0x6, 0x322a, 0x8, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x8, 0x1, 0xffffff27, 0x1f, 0x9, 0x0, 0x4, 0xb4c1, 0x6, 0x8, 0x0, 0xe00000, 0x2, 0x6, 0xffffffff, 0x7, 0x3, 0x3f, 0x2, 0x10001, 0x40, 0x2b1, 0x10000, 0x1, 0x1, 0x1, 0x7ff, 0xc203, 0x6, 0x5, 0xfffffff7, 0x7, 0x5, 0x80000001, 0x1, 0x5, 0x10000, 0x5, 0x4a4, 0xffffb38c, 0x4, 0xff, 0x8001, 0x3, 0x400, 0x6a3c3506, 0xfffffff8, 0x6, 0x9, 0x501, 0x20, 0x80000001, 0x9, 0x81, 0x7, 0x80000000, 0x9, 0x5, 0x3, 0x7, 0x88, 0x6, 0x7fff, 0x8, 0x6, 0x3ff, 0x6, 0xfffffff9, 0x94e, 0x4, 0x7, 0x80, 0x1, 0xdad, 0x9, 0x968, 0x5, 0x40, 0xf, 0xd36, 0x1f, 0x1, 0x5, 0xf8, 0x1, 0x4, 0x7, 0xff, 0x9f91, 0x59e, 0x4, 0x8, 0x2, 0x1, 0x7fd7, 0x80000001, 0x80, 0x9, 0x5e5, 0x3, 0x10001, 0x5, 0x7, 0xfffffffa, 0x68e, 0xbe, 0x4, 0x80000000, 0x1f, 0x3, 0x40, 0x4, 0x6, 0x505, 0x0, 0x7fff, 0x100, 0x8, 0xffff, 0x0, 0x5, 0xf2, 0x1, 0xfa22, 0x7, 0x5, 0x3, 0x0, 0x5, 0x7, 0x4, 0x4, 0x8001, 0x2, 0x6, 0x7ff, 0x2, 0x3, 0x2, 0x5, 0x1, 0x1, 0x7, 0x101, 0xde, 0x1ff, 0x3, 0x3, 0x3b4b, 0x3, 0xfffffffe, 0x40, 0x0, 0x9, 0x0, 0x4, 0xff, 0x7f, 0x2, 0xff, 0x3, 0x5c6a, 0x8, 0x9d, 0x1, 0x8, 0x1, 0xc81, 0x800, 0x0, 0x0, 0x10001, 0xd959]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5722}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x65c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE64={0xc}]]}, {0x13, 0x6, "20511649a73ad34cb806dd4b157b48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x74, 0x9, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x1, 0x2, 0x8}}]}, {0x31, 0x6, "c9066a82f90d46427b8c1ab49e820258898f5ca8ac7c8601e374c9ff5bb0e19c82d18a4020cd1540e1f1ef68e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xcc8, 0x20, 0x0, 0x0, {{0xb}, {0xc6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x7, 0x0, 0x1, 0x8, 0x20, 0x7, 0x3, 0x8001, 0x0, 0xb6c3, 0x177, 0x1, 0x6d, 0x0, 0x8, 0x400, 0x8ef4, 0x5, 0x80, 0x81, 0xa95, 0x3, 0x5, 0x3, 0x60e2b0ef, 0x4, 0x400, 0x800, 0x1, 0x7fffffff, 0x9, 0x9d44, 0x9, 0x6, 0x1, 0x800, 0x80000000, 0x8c, 0x6, 0x10000, 0x16cd, 0x20, 0xffffffff, 0x9, 0x20000, 0x8, 0xfffffffe, 0x611, 0x7, 0x10000, 0x2, 0x9, 0x10001, 0x4, 0x4, 0x3ff, 0x58f7, 0xffff, 0xfffff8c1, 0x3, 0x8, 0x24f, 0x7, 0x80, 0x4, 0x9, 0x0, 0x1, 0x7f, 0x1f0, 0x40000, 0x88df, 0x5e82, 0x6, 0x4, 0x6, 0x624, 0x5, 0x7, 0x1, 0x6, 0x6, 0x20, 0x1, 0x1f, 0x1, 0x7f, 0x6, 0x1, 0x5, 0x401, 0x727, 0x80000001, 0x1, 0x8, 0x0, 0x0, 0x9, 0x200, 0x1, 0xa6ff, 0x80, 0x6, 0x64, 0x0, 0x124, 0x100, 0x9, 0x5881, 0x3, 0x3, 0x7, 0xa7b2, 0x6, 0xdceb, 0x100, 0x81, 0x5, 0x0, 0x8000, 0x1, 0x2, 0x7f, 0x4, 0x1, 0x4, 0xffff0001, 0x4ee8, 0x0, 0x7f, 0x8, 0xffffffff, 0x20, 0x9, 0x0, 0xffffffff, 0x7, 0x0, 0x6b7, 0xa9, 0x200, 0x9, 0x7ff, 0xfffff801, 0x6, 0xffffffe1, 0xcb, 0x3, 0x2, 0x5, 0x6, 0x8001, 0x2, 0x4, 0x7, 0x63, 0x800, 0x7, 0x8001, 0x401, 0x9, 0x1, 0x1, 0x9c, 0x400, 0x30c0, 0xff, 0x4, 0x3, 0x200, 0x9, 0x0, 0x6, 0xc57, 0x7, 0x7213, 0x1, 0x7fff, 0x4, 0x46d0, 0x3, 0x7fff, 0x0, 0xffffff77, 0x7, 0xfffffffe, 0x0, 0x7fffffff, 0x7fffffff, 0x4, 0x6bb, 0x1, 0x8, 0x9, 0x8, 0x0, 0x81, 0x5, 0x7, 0xffffffff, 0x7d07d7e, 0x1, 0x80000, 0x1f, 0x0, 0x0, 0x5, 0x8, 0x3, 0x5, 0x1, 0xfffffffd, 0x8, 0x108, 0x8001, 0x7, 0xb12, 0x1, 0xffff, 0x4, 0x5, 0xd0d4, 0x699, 0x3, 0xd15f, 0xfffffffe, 0x34, 0xc3ce, 0x7fff, 0x7, 0x5, 0x0, 0x6, 0x1000, 0xb4, 0x8, 0x33, 0x129, 0x400, 0xfffffffd, 0xffffffff, 0x2a8e, 0x7fff, 0x0, 0x1000, 0xaef, 0x1f, 0x6e, 0xd49a, 0x8, 0x6, 0x8000, 0x100, 0x10001, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x44, 0xc164, 0x9, 0x873, 0x9, 0xfffffeff, 0x9, 0xf039, 0x7fff, 0x8, 0x295, 0x7, 0x5, 0x10001, 0x3, 0x0, 0x800, 0x3e3, 0xffffffff, 0x3, 0x0, 0x7f, 0x5, 0x3f, 0x9a, 0xf, 0x6, 0x6, 0x240000, 0x8001, 0x6, 0x1, 0x5, 0xb74, 0x7fff, 0x6, 0xf286, 0x6, 0xfffffffb, 0x3f, 0x7, 0x3, 0x6, 0xfffffff8, 0x9, 0x8, 0x5, 0x8, 0x8001, 0xfffffffd, 0x6cdf, 0x2, 0x1000, 0x8, 0x80000000, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2d1f, 0x9, 0x108, 0x1, 0x8, 0x4, 0x1ff, 0x1d2, 0x7, 0x14ba, 0x535, 0x6, 0x8, 0xffff, 0x3, 0xc3f0, 0x0, 0x0, 0x101, 0x0, 0xce2, 0x1000, 0x3, 0x7, 0xc4b4, 0xfffffc01, 0x6, 0x80000001, 0x78c, 0x0, 0x6, 0xffff, 0x3f, 0x7, 0xfff, 0x5, 0x55, 0x1000, 0x6, 0x4, 0x0, 0x401, 0x5, 0x7, 0xfffffff9, 0x7fffffff, 0x5bffe502, 0xfffffeff, 0xffff3da8, 0x1, 0x80000000, 0x80000000, 0x1ff, 0x8000, 0x5, 0x7, 0xd02b, 0x20, 0x400, 0x135, 0x6, 0x8, 0x1, 0xfffffa16, 0x9, 0x1, 0x4, 0x1, 0x4c0, 0x2, 0x3, 0xffff1f59, 0x2, 0x3f, 0x5, 0x8, 0x7, 0x6, 0x2cb1, 0x2, 0xe7, 0x50942a25, 0x453a86c2, 0x2, 0xd4, 0x400, 0x400, 0x9, 0xd4, 0x7, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x0, 0x7, 0x8000, 0x81cd, 0xf1, 0xffffffc1, 0x3, 0xce3, 0xfffeffff, 0x3ff, 0x80, 0x3, 0xf6d, 0x9, 0xfffffff8, 0x5, 0x3, 0x400, 0x7ff, 0x9, 0xb7e3, 0x0, 0x2, 0x0, 0x4, 0x10001, 0xfffffff7, 0x7ff, 0x9, 0x0, 0x1c6f, 0x8001, 0x2, 0x200, 0x6be9, 0x7f, 0x100, 0x1, 0x3ff, 0x615, 0x5fd, 0x5, 0x3, 0x80, 0xa1f5, 0x60a8, 0x4, 0x3ff, 0x9, 0x6b, 0x0, 0x9, 0x4, 0xa00, 0x8961, 0x0, 0x2, 0x1, 0x8, 0x100, 0xffff24ac, 0x79d9, 0x8, 0x4214, 0x8, 0x7861, 0x3, 0x81, 0x400, 0x1ff, 0x7, 0xd38, 0x1000, 0x3ff, 0x5, 0x4, 0x5f6a, 0x80000000, 0x9, 0x2, 0x33, 0x8, 0x0, 0x0, 0x4ae, 0x6, 0x9, 0x6, 0x1, 0x0, 0x20000000, 0x2, 0x4, 0x1, 0x1b17, 0xf7, 0x2, 0x401, 0xff, 0x3c59]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8ab, 0xfffffffe, 0x6, 0x5, 0xee38, 0xa4, 0x6, 0x8, 0x8, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x1000, 0x401, 0x101, 0x0, 0x8, 0xffffffa8, 0xb2e4, 0x9, 0x20, 0xff, 0x6, 0x10001, 0x3, 0x200, 0x9, 0x9273, 0x8000, 0xe56, 0x4, 0xfffffeff, 0x913b, 0x7, 0x7, 0x3, 0x2, 0x8, 0x6, 0x40, 0x80, 0x6, 0x7fffffff, 0x833, 0x7, 0x8001, 0x4, 0x9, 0xfff, 0x5, 0x52b9, 0xc5c, 0x35f19359, 0x5f, 0x162a, 0x5, 0x10000, 0xb567, 0xfffffffe, 0x7, 0x0, 0x5, 0x80000000, 0xec9d, 0x0, 0x800, 0x800, 0x7fffffff, 0x7fffffff, 0x100, 0x6, 0x3ff, 0xc6bc, 0x34d24f5c, 0x9e5, 0xfe, 0x8, 0x54, 0xfffffffc, 0x2, 0x800, 0x3, 0x4, 0xa40a, 0xa662, 0xd1, 0xd2, 0x6, 0x20, 0x6, 0x7fff, 0x0, 0x400, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0xff, 0x8, 0x2, 0x1000, 0x9, 0x20, 0x5e6, 0x3f, 0x9352, 0x800, 0x5, 0x401, 0x80000000, 0x4, 0x4, 0x6, 0x2, 0x401, 0x6, 0x40, 0x4, 0x2, 0x81, 0x2, 0x9, 0x3f, 0xffff1306, 0x0, 0xffff, 0x9, 0xe3, 0x9, 0x4, 0x6, 0x0, 0x3, 0xfffffff7, 0x5, 0x4, 0x1, 0x0, 0xc34d, 0x2, 0x80, 0x10, 0x6, 0x200, 0xfe8, 0x5, 0x3, 0x8f7, 0x1, 0x0, 0xfff, 0x1, 0x10000, 0x6, 0x401, 0xe7c3, 0xffff16a8, 0x6, 0x0, 0x2, 0x1, 0x7, 0xfffffffd, 0x3, 0x3, 0x29b, 0xff, 0x7, 0x7fff, 0x7, 0xfffffffd, 0x6, 0x2, 0x3ff, 0x8803, 0x7fffffff, 0x1, 0xff, 0x1f, 0x81, 0x81, 0x5, 0x80000001, 0x8001, 0x40, 0x2, 0x1819, 0x8, 0x6, 0x8, 0x0, 0x8001, 0xfffffff7, 0xfff, 0x7f, 0xfffffff7, 0xffffff80, 0x101, 0x3, 0x5, 0x1000, 0xffffffff, 0x6, 0x0, 0x100, 0x1, 0x2, 0x6, 0x8, 0x7f, 0x4, 0xf9, 0x4, 0x7, 0x1, 0x10001, 0x8001, 0x7, 0x84, 0x200, 0x1, 0x0, 0x1, 0x7, 0x6, 0xb08, 0x4, 0x10001, 0x9ae5, 0x4, 0x294e, 0x3ff, 0x97, 0x6, 0x2, 0x6, 0x1, 0x40, 0x3, 0x8, 0x56, 0x25cfdd7b, 0x972, 0x0, 0xe68, 0x3, 0x1, 0x7, 0x5, 0xfffffffb, 0xffffff81, 0x6, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x33, 0x6, "08ee66eee7556081bfe19575eb071dabaf7b477b0e72be1f628227577771d0ed7f9b7093ce9d93e26168015645e7b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x154, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x63, 0x1f, 0x6, 0x2, 0xb4ba}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}]}, {0xe7, 0x6, "d87a34bc07d07d771acecb62c75b65ef50f1b0cf84809ab2add296653a0051282f9614fd8f72a6ca918d0c0dc8cd3fe00449e98c023cc9bf02a56797a743cce2b986086f82b06471199f16d65f3199882aaed5f35863ebef7b3fd6109d70f0e85759e7d5a12fab8f779baa92f28e198cab062bebcc0a97ccce6965fd70b8ede358d25b2493714d3deb63c9025827a0b8c2702e197f76d109a702794fd598cf9f77341ea65faa968ce7e05a9a96ef095d3b99d73d1aaea3ac41e7dbef733c2a5f7f746413cc7d7719b45b41e6ba2a78a7abaefcfecf649f7e4914bccd38b2a992fe3805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x188, 0xe, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xa4, 0xd, 0x76b5, 0x81}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0x3, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8d5, 0x3, 0x800, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x7, 0x101, 0x7ff}, 0x39}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xad, 0x10000000, 0x860, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0xf4, 0x583f}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x2, 0x758, 0xb5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2c, 0x6, 0x10000000, 0x40, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x5, 0x2, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x4, 0x5, 0x3341e7e2}, 0x7f}}]}, {0x3f, 0x6, "bc6cca53ee934de92dcc774a36ed326af872d0983384c0f4f6651502d84e23e3eb90f2ecadf0b0620fa71a4af093f3ae531021d0f22e23de0fdbad"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ctinfo={0x10b0, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x296, 0x7fff, 0x7, 0x4, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1ff, 0x8000, 0x6, 0x3ff, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfb7, 0x0, 0x1, 0x1000, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xcbd}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x700d0b1399c71ca1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x64, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "ecc952d1a7a194e3be26ff3d0f498e14a4ab02fb9dc8581b9731d693a5dab00dbad78294670f43062b5c09046b2e1b7ae727ed911cc217"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x10c, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf2b, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x166c, 0xffffffffffffffff}}]}, {0xc5, 0x6, "268cd7b56bc2456bff7942deb2640bad08d7f050a1a0e5375462f2e8b31d07874b3e9cb0723eee7eb36d1bca5d445ef29d6fbfbb1ba32b03d82d8d10bf8692f30c2b2be5eba2bc7a5392bf2698d74b5566aeafd200463d32a656fd04f1df5cabd269dcef308ffc50842c5418dae500cf592302038c6780980157faae2249b49ebd34cd488c3b8b0eb871f69ec0c133c9beef35773a0d8d7531201ec4aef095bfa2132dfd9ec1f245d02c92ce10966805191cc874e3f636fdf8269e3bd3655a0236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xbbc18ec07321938, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x384, 0x2, [@m_mpls={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xc8}, @TCA_MPLS_TTL={0x5, 0x7, 0xe0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x79b25}]}, {0x65, 0x6, "39505238f7cfef51d6f05254463af84c2ac0f3a7a5c78fa036cdc8e62d9912e78c040456005ffa0b7b33468138251d61633905fd9e06989a26d31221943c5625cf64af46d3bd344c774a008afada820a77281746aaac8561ebe7fc8f8082476540"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x3e, 0x5, 0x6}, {0x7f, 0x7, 0x5, 0x6}, {0x0, 0x1, 0x81, 0xffff0001}, {0x8, 0x40, 0x5, 0xfb}, {0x3, 0x2, 0x2, 0x3}, {0x0, 0x6, 0x20, 0xfffffffb}, {0x1, 0x6, 0x1, 0x6}, {0xffff, 0x3f, 0x80, 0x3238054e}]}]}, {0xb7, 0x6, "ffe465cae83f3974a8e6e8d3624ed8883a19750d4f07143a726cb87a425dc21000633df3b9d448ea8e75217213dedd7ef28f415f8e65111231f39bbde284f5609534de6ff08b54b31e485699b130486ceae1a67d8e6cb6e389e9055fdde1c11e43793c4579f60ef03a196c0d81f037a0a3bc5b6dbaaa21c7768aef736fdbf648f4bedbace3f2ef8d1afa0ca63591830dc8e74281dc0abf7321906619d5dea51391b905b5b2bddedaea7b165f4cc4e96827dba2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffde, 0x496, 0x2, 0x3ff, 0x4}}]}, {0x3a, 0x6, "ab249372bf78ab78045205b0d69be58be177e03a6e7b17d16cab95bfd9497296ccdc368f004636923354e6712700d5d2f7701e40c165"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xef35, 0xd85, 0x8, 0x3c7, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7f, 0x2, 0xfffffffe, 0xa17f}, @multicast2, @rand_addr=0x64010100}}]}, {0x53, 0x6, "47baf38f314c3a74f830ad8f7fbfcfe4888905b1caba51ba1bbe09433aa136fcba1c31837b7ea27332b96b19134aa1a1e54ee911fe647b678e18008588dfc2fcef7740f37f27cad0501160a71883e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x4c, 0xf, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x11, 0x6, "567ad65c3749d004b67565ef5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xb}}]}}]}, 0x30b0}}, 0x0) [ 2235.077989][ T27] audit: type=1326 audit(1676867491.186:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x7fc00000 [ 2242.991574][ T27] audit: type=1326 audit(1676867499.106:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ffc549 code=0x7fc00000 04:31:39 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:31:39 executing program 0: syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:31:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000040601020000000000e10000060000010500010007"], 0x44}}, 0x0) 04:31:39 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0xac666000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x40, 0x7, 0x4d9, 0x654, {{0x1c, 0x4, 0x1, 0x16, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x23, 0x13, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @empty]}, @generic={0x94, 0x12, "eb5a909e34b0fbf9ced214aa1ad9907e"}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x3, [{@multicast2, 0x7}, {@multicast2, 0x6}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=@delqdisc={0x80, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x4}, {0x7, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5322}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x14}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2b7, 0xffffffff, 0x0, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5e}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x58200}}, 0x24000045) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r3, 0x401, 0x0, 0x6}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x9, 0xf}, {0x6}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x1bbc}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xae1c}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040090) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x2, 0x3, 0x3) getsockopt$sock_timeval(r7, 0x1, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000b0f0000008bfbbc6e0060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001007072696f000000001800020004"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48008) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004000)=@newtfilter={0x30b0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x307c, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x2cd8, 0x2, [@m_connmark={0x15c, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xffff, 0x81}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcbd56b8, 0x2, 0x5, 0x60, 0x10001}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffff7f, 0x20000000, 0x5e, 0xfffffff8}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x2, 0x6, 0x8, 0x4}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5c1, 0xffffffffeffffffe, 0x40, 0x1800}, 0x7fff}}]}, {0x9e, 0x6, "7e3e7cab88877830663760db735b699d6a5cc9680c7f1ab917cc593da2e403b88d5273cd877893c92709e7488b6ba0a57a95109bdefcec8095c13276167ec3a1ef85f4ca383f31b79c6e48dbfd31922c2c439b4de54a1010670cfcba035380a5f3cf6389ba9391723bda5fc2eb4935435fde9d3653f99d58ed3ac6a4709412852d6a87646a9580c3fba1ffb973bcb988469662b0b45491ff611b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x940, 0x1b, 0x0, 0x0, {{0xb}, {0x904, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x3ff, 0x6, 0x9, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x26, 0x8, 0x8, 0x0, 0x3f, 0x9566, 0x8000, 0x80000000, 0xffff, 0x7, 0x6, 0x1d40, 0x0, 0x7ff, 0x3, 0x3743, 0x0, 0x6, 0x3, 0x10000, 0x40, 0x3, 0x8001, 0x0, 0xfffffffd, 0x3, 0x0, 0x6, 0x0, 0x1, 0xfffffffd, 0x6, 0x200, 0x3f, 0x80, 0x5, 0x0, 0x1, 0x8, 0x7, 0x8001, 0xffffffd7, 0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x7fffffff, 0x86, 0xfffffffd, 0x6, 0x6, 0x9ea1, 0x0, 0x9, 0x101, 0x1f, 0xc6, 0x4, 0x9, 0x7f, 0x0, 0x4, 0x4, 0x5, 0x9, 0xffffff00, 0x3, 0x6, 0x5, 0x8, 0x200, 0x1bad, 0x9b04, 0x9, 0x800, 0xcfc, 0xc1e, 0x3ff, 0x400, 0x3, 0x0, 0x4, 0x3, 0x7fff, 0x0, 0x3, 0x166, 0x0, 0x3, 0x0, 0x7, 0x7f, 0x383a1b0a, 0x8, 0xcf8, 0x51, 0x10000, 0x8de8, 0x3, 0x7b9, 0xffffffff, 0x0, 0xfffffffb, 0x800, 0x8001, 0x7, 0x8ff, 0x10001, 0x3903, 0x804, 0x2, 0x101, 0x5, 0x8, 0x101, 0x3, 0x412b, 0x4, 0x7, 0x0, 0x4, 0x6, 0x6, 0x6, 0x5, 0x1, 0xffff, 0xc0, 0x10000, 0xfffffffd, 0xffffffff, 0x6, 0xfd8a, 0x1, 0x0, 0x2, 0x5, 0x401, 0x80000000, 0x40, 0x0, 0x1, 0xd67a, 0x9, 0x200, 0x493b87f4, 0x6, 0x7a9, 0x3, 0x5, 0x4ae0, 0x8, 0x3ff, 0x6b5, 0x800, 0x6, 0x9, 0x2, 0xa3b, 0x9, 0xfcf, 0x3f, 0x3f, 0x80, 0xd6, 0xea, 0xb8, 0x6ff6, 0x100, 0x1, 0x297, 0x80, 0xb3f3, 0x9, 0x81, 0x200, 0x81c1, 0x9, 0x9, 0xffffd9a6, 0xb4, 0x3, 0x0, 0x0, 0x9, 0x1000, 0x7ff, 0x7f, 0x1, 0x80, 0x7, 0x7ff, 0x9a68, 0x5, 0x5, 0x8001, 0x40, 0xbb5, 0x9, 0xff, 0xffff, 0x2, 0xfffffff9, 0x6, 0x4, 0x81, 0x6e13, 0x3, 0x10001, 0x4, 0x859e, 0x6, 0x7e1, 0x80000000, 0x9, 0x4, 0x2, 0x624, 0x1ff, 0x80000000, 0xfdd, 0x80000000, 0x3, 0x4, 0x80000000, 0x6, 0x3, 0xffffffff, 0x0, 0x4a5, 0x4, 0x9, 0xfff, 0x3ff, 0x9, 0x2, 0x20, 0x6, 0x10001, 0x9, 0xe9f0, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x3, 0x31800, 0xe2, {0x0, 0x2, 0x7, 0x8, 0x800, 0x20}, {0x4, 0x2, 0x1f, 0x21, 0x0, 0xee}, 0x5, 0x5, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x3, 0x1f, 0x0, {0x1f, 0x2, 0x3, 0x4, 0x14ad, 0x4}, {0x7, 0x0, 0x0, 0xff, 0x3, 0x4}, 0x8, 0xfffff209, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2da}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x1, 0x8, 0x7f, 0x2751, 0x8, 0x68e3, 0x1ff, 0xfffffff7, 0x480, 0x5, 0xffffffff, 0x8000, 0x401, 0x3d4, 0x80000001, 0x6, 0x0, 0x2, 0x100, 0x6, 0x800, 0x2, 0x7, 0x526, 0x3, 0x10000, 0x1976e859, 0x4, 0x451, 0x3, 0x0, 0x0, 0x3, 0x2, 0x41, 0x1, 0x1, 0x80, 0x5, 0x3, 0x4, 0xd7f, 0x1000, 0x5, 0x352e, 0x5, 0x0, 0x9, 0x40, 0xffffffff, 0x1, 0x10000, 0x3, 0xfffffff7, 0xc0fa, 0x1, 0x3, 0x0, 0x20, 0x3, 0x1f, 0x4, 0x1000, 0x7, 0x2, 0x9, 0x24000, 0x2, 0x76ae8c6e, 0xc8e1, 0x4, 0x7d3, 0x9, 0x6, 0x322a, 0x8, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x8, 0x1, 0xffffff27, 0x1f, 0x9, 0x0, 0x4, 0xb4c1, 0x6, 0x8, 0x0, 0xe00000, 0x2, 0x6, 0xffffffff, 0x7, 0x3, 0x3f, 0x2, 0x10001, 0x40, 0x2b1, 0x10000, 0x1, 0x1, 0x1, 0x7ff, 0xc203, 0x6, 0x5, 0xfffffff7, 0x7, 0x5, 0x80000001, 0x1, 0x5, 0x10000, 0x5, 0x4a4, 0xffffb38c, 0x4, 0xff, 0x8001, 0x3, 0x400, 0x6a3c3506, 0xfffffff8, 0x6, 0x9, 0x501, 0x20, 0x80000001, 0x9, 0x81, 0x7, 0x80000000, 0x9, 0x5, 0x3, 0x7, 0x88, 0x6, 0x7fff, 0x8, 0x6, 0x3ff, 0x6, 0xfffffff9, 0x94e, 0x4, 0x7, 0x80, 0x1, 0xdad, 0x9, 0x968, 0x5, 0x40, 0xf, 0xd36, 0x1f, 0x1, 0x5, 0xf8, 0x1, 0x4, 0x7, 0xff, 0x9f91, 0x59e, 0x4, 0x8, 0x2, 0x1, 0x7fd7, 0x80000001, 0x80, 0x9, 0x5e5, 0x3, 0x10001, 0x5, 0x7, 0xfffffffa, 0x68e, 0xbe, 0x4, 0x80000000, 0x1f, 0x3, 0x40, 0x4, 0x6, 0x505, 0x0, 0x7fff, 0x100, 0x8, 0xffff, 0x0, 0x5, 0xf2, 0x1, 0xfa22, 0x7, 0x5, 0x3, 0x0, 0x5, 0x7, 0x4, 0x4, 0x8001, 0x2, 0x6, 0x7ff, 0x2, 0x3, 0x2, 0x5, 0x1, 0x1, 0x7, 0x101, 0xde, 0x1ff, 0x3, 0x3, 0x3b4b, 0x3, 0xfffffffe, 0x40, 0x0, 0x9, 0x0, 0x4, 0xff, 0x7f, 0x2, 0xff, 0x3, 0x5c6a, 0x8, 0x9d, 0x1, 0x8, 0x1, 0xc81, 0x800, 0x0, 0x0, 0x10001, 0xd959]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5722}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x65c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE64={0xc}]]}, {0x13, 0x6, "20511649a73ad34cb806dd4b157b48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x74, 0x9, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x1, 0x2, 0x8}}]}, {0x31, 0x6, "c9066a82f90d46427b8c1ab49e820258898f5ca8ac7c8601e374c9ff5bb0e19c82d18a4020cd1540e1f1ef68e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xcc8, 0x20, 0x0, 0x0, {{0xb}, {0xc6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x7, 0x0, 0x1, 0x8, 0x20, 0x7, 0x3, 0x8001, 0x0, 0xb6c3, 0x177, 0x1, 0x6d, 0x0, 0x8, 0x400, 0x8ef4, 0x5, 0x80, 0x81, 0xa95, 0x3, 0x5, 0x3, 0x60e2b0ef, 0x4, 0x400, 0x800, 0x1, 0x7fffffff, 0x9, 0x9d44, 0x9, 0x6, 0x1, 0x800, 0x80000000, 0x8c, 0x6, 0x10000, 0x16cd, 0x20, 0xffffffff, 0x9, 0x20000, 0x8, 0xfffffffe, 0x611, 0x7, 0x10000, 0x2, 0x9, 0x10001, 0x4, 0x4, 0x3ff, 0x58f7, 0xffff, 0xfffff8c1, 0x3, 0x8, 0x24f, 0x7, 0x80, 0x4, 0x9, 0x0, 0x1, 0x7f, 0x1f0, 0x40000, 0x88df, 0x5e82, 0x6, 0x4, 0x6, 0x624, 0x5, 0x7, 0x1, 0x6, 0x6, 0x20, 0x1, 0x1f, 0x1, 0x7f, 0x6, 0x1, 0x5, 0x401, 0x727, 0x80000001, 0x1, 0x8, 0x0, 0x0, 0x9, 0x200, 0x1, 0xa6ff, 0x80, 0x6, 0x64, 0x0, 0x124, 0x100, 0x9, 0x5881, 0x3, 0x3, 0x7, 0xa7b2, 0x6, 0xdceb, 0x100, 0x81, 0x5, 0x0, 0x8000, 0x1, 0x2, 0x7f, 0x4, 0x1, 0x4, 0xffff0001, 0x4ee8, 0x0, 0x7f, 0x8, 0xffffffff, 0x20, 0x9, 0x0, 0xffffffff, 0x7, 0x0, 0x6b7, 0xa9, 0x200, 0x9, 0x7ff, 0xfffff801, 0x6, 0xffffffe1, 0xcb, 0x3, 0x2, 0x5, 0x6, 0x8001, 0x2, 0x4, 0x7, 0x63, 0x800, 0x7, 0x8001, 0x401, 0x9, 0x1, 0x1, 0x9c, 0x400, 0x30c0, 0xff, 0x4, 0x3, 0x200, 0x9, 0x0, 0x6, 0xc57, 0x7, 0x7213, 0x1, 0x7fff, 0x4, 0x46d0, 0x3, 0x7fff, 0x0, 0xffffff77, 0x7, 0xfffffffe, 0x0, 0x7fffffff, 0x7fffffff, 0x4, 0x6bb, 0x1, 0x8, 0x9, 0x8, 0x0, 0x81, 0x5, 0x7, 0xffffffff, 0x7d07d7e, 0x1, 0x80000, 0x1f, 0x0, 0x0, 0x5, 0x8, 0x3, 0x5, 0x1, 0xfffffffd, 0x8, 0x108, 0x8001, 0x7, 0xb12, 0x1, 0xffff, 0x4, 0x5, 0xd0d4, 0x699, 0x3, 0xd15f, 0xfffffffe, 0x34, 0xc3ce, 0x7fff, 0x7, 0x5, 0x0, 0x6, 0x1000, 0xb4, 0x8, 0x33, 0x129, 0x400, 0xfffffffd, 0xffffffff, 0x2a8e, 0x7fff, 0x0, 0x1000, 0xaef, 0x1f, 0x6e, 0xd49a, 0x8, 0x6, 0x8000, 0x100, 0x10001, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x44, 0xc164, 0x9, 0x873, 0x9, 0xfffffeff, 0x9, 0xf039, 0x7fff, 0x8, 0x295, 0x7, 0x5, 0x10001, 0x3, 0x0, 0x800, 0x3e3, 0xffffffff, 0x3, 0x0, 0x7f, 0x5, 0x3f, 0x9a, 0xf, 0x6, 0x6, 0x240000, 0x8001, 0x6, 0x1, 0x5, 0xb74, 0x7fff, 0x6, 0xf286, 0x6, 0xfffffffb, 0x3f, 0x7, 0x3, 0x6, 0xfffffff8, 0x9, 0x8, 0x5, 0x8, 0x8001, 0xfffffffd, 0x6cdf, 0x2, 0x1000, 0x8, 0x80000000, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2d1f, 0x9, 0x108, 0x1, 0x8, 0x4, 0x1ff, 0x1d2, 0x7, 0x14ba, 0x535, 0x6, 0x8, 0xffff, 0x3, 0xc3f0, 0x0, 0x0, 0x101, 0x0, 0xce2, 0x1000, 0x3, 0x7, 0xc4b4, 0xfffffc01, 0x6, 0x80000001, 0x78c, 0x0, 0x6, 0xffff, 0x3f, 0x7, 0xfff, 0x5, 0x55, 0x1000, 0x6, 0x4, 0x0, 0x401, 0x5, 0x7, 0xfffffff9, 0x7fffffff, 0x5bffe502, 0xfffffeff, 0xffff3da8, 0x1, 0x80000000, 0x80000000, 0x1ff, 0x8000, 0x5, 0x7, 0xd02b, 0x20, 0x400, 0x135, 0x6, 0x8, 0x1, 0xfffffa16, 0x9, 0x1, 0x4, 0x1, 0x4c0, 0x2, 0x3, 0xffff1f59, 0x2, 0x3f, 0x5, 0x8, 0x7, 0x6, 0x2cb1, 0x2, 0xe7, 0x50942a25, 0x453a86c2, 0x2, 0xd4, 0x400, 0x400, 0x9, 0xd4, 0x7, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x0, 0x7, 0x8000, 0x81cd, 0xf1, 0xffffffc1, 0x3, 0xce3, 0xfffeffff, 0x3ff, 0x80, 0x3, 0xf6d, 0x9, 0xfffffff8, 0x5, 0x3, 0x400, 0x7ff, 0x9, 0xb7e3, 0x0, 0x2, 0x0, 0x4, 0x10001, 0xfffffff7, 0x7ff, 0x9, 0x0, 0x1c6f, 0x8001, 0x2, 0x200, 0x6be9, 0x7f, 0x100, 0x1, 0x3ff, 0x615, 0x5fd, 0x5, 0x3, 0x80, 0xa1f5, 0x60a8, 0x4, 0x3ff, 0x9, 0x6b, 0x0, 0x9, 0x4, 0xa00, 0x8961, 0x0, 0x2, 0x1, 0x8, 0x100, 0xffff24ac, 0x79d9, 0x8, 0x4214, 0x8, 0x7861, 0x3, 0x81, 0x400, 0x1ff, 0x7, 0xd38, 0x1000, 0x3ff, 0x5, 0x4, 0x5f6a, 0x80000000, 0x9, 0x2, 0x33, 0x8, 0x0, 0x0, 0x4ae, 0x6, 0x9, 0x6, 0x1, 0x0, 0x20000000, 0x2, 0x4, 0x1, 0x1b17, 0xf7, 0x2, 0x401, 0xff, 0x3c59]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8ab, 0xfffffffe, 0x6, 0x5, 0xee38, 0xa4, 0x6, 0x8, 0x8, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x1000, 0x401, 0x101, 0x0, 0x8, 0xffffffa8, 0xb2e4, 0x9, 0x20, 0xff, 0x6, 0x10001, 0x3, 0x200, 0x9, 0x9273, 0x8000, 0xe56, 0x4, 0xfffffeff, 0x913b, 0x7, 0x7, 0x3, 0x2, 0x8, 0x6, 0x40, 0x80, 0x6, 0x7fffffff, 0x833, 0x7, 0x8001, 0x4, 0x9, 0xfff, 0x5, 0x52b9, 0xc5c, 0x35f19359, 0x5f, 0x162a, 0x5, 0x10000, 0xb567, 0xfffffffe, 0x7, 0x0, 0x5, 0x80000000, 0xec9d, 0x0, 0x800, 0x800, 0x7fffffff, 0x7fffffff, 0x100, 0x6, 0x3ff, 0xc6bc, 0x34d24f5c, 0x9e5, 0xfe, 0x8, 0x54, 0xfffffffc, 0x2, 0x800, 0x3, 0x4, 0xa40a, 0xa662, 0xd1, 0xd2, 0x6, 0x20, 0x6, 0x7fff, 0x0, 0x400, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0xff, 0x8, 0x2, 0x1000, 0x9, 0x20, 0x5e6, 0x3f, 0x9352, 0x800, 0x5, 0x401, 0x80000000, 0x4, 0x4, 0x6, 0x2, 0x401, 0x6, 0x40, 0x4, 0x2, 0x81, 0x2, 0x9, 0x3f, 0xffff1306, 0x0, 0xffff, 0x9, 0xe3, 0x9, 0x4, 0x6, 0x0, 0x3, 0xfffffff7, 0x5, 0x4, 0x1, 0x0, 0xc34d, 0x2, 0x80, 0x10, 0x6, 0x200, 0xfe8, 0x5, 0x3, 0x8f7, 0x1, 0x0, 0xfff, 0x1, 0x10000, 0x6, 0x401, 0xe7c3, 0xffff16a8, 0x6, 0x0, 0x2, 0x1, 0x7, 0xfffffffd, 0x3, 0x3, 0x29b, 0xff, 0x7, 0x7fff, 0x7, 0xfffffffd, 0x6, 0x2, 0x3ff, 0x8803, 0x7fffffff, 0x1, 0xff, 0x1f, 0x81, 0x81, 0x5, 0x80000001, 0x8001, 0x40, 0x2, 0x1819, 0x8, 0x6, 0x8, 0x0, 0x8001, 0xfffffff7, 0xfff, 0x7f, 0xfffffff7, 0xffffff80, 0x101, 0x3, 0x5, 0x1000, 0xffffffff, 0x6, 0x0, 0x100, 0x1, 0x2, 0x6, 0x8, 0x7f, 0x4, 0xf9, 0x4, 0x7, 0x1, 0x10001, 0x8001, 0x7, 0x84, 0x200, 0x1, 0x0, 0x1, 0x7, 0x6, 0xb08, 0x4, 0x10001, 0x9ae5, 0x4, 0x294e, 0x3ff, 0x97, 0x6, 0x2, 0x6, 0x1, 0x40, 0x3, 0x8, 0x56, 0x25cfdd7b, 0x972, 0x0, 0xe68, 0x3, 0x1, 0x7, 0x5, 0xfffffffb, 0xffffff81, 0x6, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x33, 0x6, "08ee66eee7556081bfe19575eb071dabaf7b477b0e72be1f628227577771d0ed7f9b7093ce9d93e26168015645e7b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x154, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x63, 0x1f, 0x6, 0x2, 0xb4ba}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}]}, {0xe7, 0x6, "d87a34bc07d07d771acecb62c75b65ef50f1b0cf84809ab2add296653a0051282f9614fd8f72a6ca918d0c0dc8cd3fe00449e98c023cc9bf02a56797a743cce2b986086f82b06471199f16d65f3199882aaed5f35863ebef7b3fd6109d70f0e85759e7d5a12fab8f779baa92f28e198cab062bebcc0a97ccce6965fd70b8ede358d25b2493714d3deb63c9025827a0b8c2702e197f76d109a702794fd598cf9f77341ea65faa968ce7e05a9a96ef095d3b99d73d1aaea3ac41e7dbef733c2a5f7f746413cc7d7719b45b41e6ba2a78a7abaefcfecf649f7e4914bccd38b2a992fe3805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x188, 0xe, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xa4, 0xd, 0x76b5, 0x81}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0x3, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8d5, 0x3, 0x800, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x7, 0x101, 0x7ff}, 0x39}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xad, 0x10000000, 0x860, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0xf4, 0x583f}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x2, 0x758, 0xb5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2c, 0x6, 0x10000000, 0x40, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x5, 0x2, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x4, 0x5, 0x3341e7e2}, 0x7f}}]}, {0x3f, 0x6, "bc6cca53ee934de92dcc774a36ed326af872d0983384c0f4f6651502d84e23e3eb90f2ecadf0b0620fa71a4af093f3ae531021d0f22e23de0fdbad"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ctinfo={0x10b0, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x296, 0x7fff, 0x7, 0x4, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1ff, 0x8000, 0x6, 0x3ff, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfb7, 0x0, 0x1, 0x1000, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xcbd}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x700d0b1399c71ca1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x64, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "ecc952d1a7a194e3be26ff3d0f498e14a4ab02fb9dc8581b9731d693a5dab00dbad78294670f43062b5c09046b2e1b7ae727ed911cc217"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x10c, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf2b, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x166c, 0xffffffffffffffff}}]}, {0xc5, 0x6, "268cd7b56bc2456bff7942deb2640bad08d7f050a1a0e5375462f2e8b31d07874b3e9cb0723eee7eb36d1bca5d445ef29d6fbfbb1ba32b03d82d8d10bf8692f30c2b2be5eba2bc7a5392bf2698d74b5566aeafd200463d32a656fd04f1df5cabd269dcef308ffc50842c5418dae500cf592302038c6780980157faae2249b49ebd34cd488c3b8b0eb871f69ec0c133c9beef35773a0d8d7531201ec4aef095bfa2132dfd9ec1f245d02c92ce10966805191cc874e3f636fdf8269e3bd3655a0236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xbbc18ec07321938, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x384, 0x2, [@m_mpls={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xc8}, @TCA_MPLS_TTL={0x5, 0x7, 0xe0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x79b25}]}, {0x65, 0x6, "39505238f7cfef51d6f05254463af84c2ac0f3a7a5c78fa036cdc8e62d9912e78c040456005ffa0b7b33468138251d61633905fd9e06989a26d31221943c5625cf64af46d3bd344c774a008afada820a77281746aaac8561ebe7fc8f8082476540"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x3e, 0x5, 0x6}, {0x7f, 0x7, 0x5, 0x6}, {0x0, 0x1, 0x81, 0xffff0001}, {0x8, 0x40, 0x5, 0xfb}, {0x3, 0x2, 0x2, 0x3}, {0x0, 0x6, 0x20, 0xfffffffb}, {0x1, 0x6, 0x1, 0x6}, {0xffff, 0x3f, 0x80, 0x3238054e}]}]}, {0xb7, 0x6, "ffe465cae83f3974a8e6e8d3624ed8883a19750d4f07143a726cb87a425dc21000633df3b9d448ea8e75217213dedd7ef28f415f8e65111231f39bbde284f5609534de6ff08b54b31e485699b130486ceae1a67d8e6cb6e389e9055fdde1c11e43793c4579f60ef03a196c0d81f037a0a3bc5b6dbaaa21c7768aef736fdbf648f4bedbace3f2ef8d1afa0ca63591830dc8e74281dc0abf7321906619d5dea51391b905b5b2bddedaea7b165f4cc4e96827dba2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffde, 0x496, 0x2, 0x3ff, 0x4}}]}, {0x3a, 0x6, "ab249372bf78ab78045205b0d69be58be177e03a6e7b17d16cab95bfd9497296ccdc368f004636923354e6712700d5d2f7701e40c165"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xef35, 0xd85, 0x8, 0x3c7, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7f, 0x2, 0xfffffffe, 0xa17f}, @multicast2, @rand_addr=0x64010100}}]}, {0x53, 0x6, "47baf38f314c3a74f830ad8f7fbfcfe4888905b1caba51ba1bbe09433aa136fcba1c31837b7ea27332b96b19134aa1a1e54ee911fe647b678e18008588dfc2fcef7740f37f27cad0501160a71883e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x4c, 0xf, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x11, 0x6, "567ad65c3749d004b67565ef5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xb}}]}}]}, 0x30b0}}, 0x0) 04:31:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004500)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='oom_adj\x00') r4 = getpid() sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x1, 0x2) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000500)=""/223, 0xdf}], 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) r7 = socket$inet(0x2, 0x1, 0x0) shutdown(r7, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x20000000) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) 04:31:39 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x13]}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r2, 0x895, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 2243.096901][T29296] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 04:31:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000040601020000000000e10000060000010500010007"], 0x44}}, 0x0) 04:31:39 executing program 0: syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:31:39 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0xac666000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x40, 0x7, 0x4d9, 0x654, {{0x1c, 0x4, 0x1, 0x16, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x23, 0x13, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @empty]}, @generic={0x94, 0x12, "eb5a909e34b0fbf9ced214aa1ad9907e"}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x3, [{@multicast2, 0x7}, {@multicast2, 0x6}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=@delqdisc={0x80, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x4}, {0x7, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5322}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x14}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x2b7, 0xffffffff, 0x0, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5e}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x58200}}, 0x24000045) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r3, 0x401, 0x0, 0x6}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x9, 0xf}, {0x6}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x1bbc}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xae1c}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040090) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x2, 0x3, 0x3) getsockopt$sock_timeval(r7, 0x1, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000b0f0000008bfbbc6e0060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001007072696f000000001800020004"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=@deltaction={0xe0, 0x31, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48008) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004000)=@newtfilter={0x30b0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x307c, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x2cd8, 0x2, [@m_connmark={0x15c, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xffff, 0x81}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcbd56b8, 0x2, 0x5, 0x60, 0x10001}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffff7f, 0x20000000, 0x5e, 0xfffffff8}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x2, 0x6, 0x8, 0x4}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5c1, 0xffffffffeffffffe, 0x40, 0x1800}, 0x7fff}}]}, {0x9e, 0x6, "7e3e7cab88877830663760db735b699d6a5cc9680c7f1ab917cc593da2e403b88d5273cd877893c92709e7488b6ba0a57a95109bdefcec8095c13276167ec3a1ef85f4ca383f31b79c6e48dbfd31922c2c439b4de54a1010670cfcba035380a5f3cf6389ba9391723bda5fc2eb4935435fde9d3653f99d58ed3ac6a4709412852d6a87646a9580c3fba1ffb973bcb988469662b0b45491ff611b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x940, 0x1b, 0x0, 0x0, {{0xb}, {0x904, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x3ff, 0x6, 0x9, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x26, 0x8, 0x8, 0x0, 0x3f, 0x9566, 0x8000, 0x80000000, 0xffff, 0x7, 0x6, 0x1d40, 0x0, 0x7ff, 0x3, 0x3743, 0x0, 0x6, 0x3, 0x10000, 0x40, 0x3, 0x8001, 0x0, 0xfffffffd, 0x3, 0x0, 0x6, 0x0, 0x1, 0xfffffffd, 0x6, 0x200, 0x3f, 0x80, 0x5, 0x0, 0x1, 0x8, 0x7, 0x8001, 0xffffffd7, 0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x2, 0x7fffffff, 0x86, 0xfffffffd, 0x6, 0x6, 0x9ea1, 0x0, 0x9, 0x101, 0x1f, 0xc6, 0x4, 0x9, 0x7f, 0x0, 0x4, 0x4, 0x5, 0x9, 0xffffff00, 0x3, 0x6, 0x5, 0x8, 0x200, 0x1bad, 0x9b04, 0x9, 0x800, 0xcfc, 0xc1e, 0x3ff, 0x400, 0x3, 0x0, 0x4, 0x3, 0x7fff, 0x0, 0x3, 0x166, 0x0, 0x3, 0x0, 0x7, 0x7f, 0x383a1b0a, 0x8, 0xcf8, 0x51, 0x10000, 0x8de8, 0x3, 0x7b9, 0xffffffff, 0x0, 0xfffffffb, 0x800, 0x8001, 0x7, 0x8ff, 0x10001, 0x3903, 0x804, 0x2, 0x101, 0x5, 0x8, 0x101, 0x3, 0x412b, 0x4, 0x7, 0x0, 0x4, 0x6, 0x6, 0x6, 0x5, 0x1, 0xffff, 0xc0, 0x10000, 0xfffffffd, 0xffffffff, 0x6, 0xfd8a, 0x1, 0x0, 0x2, 0x5, 0x401, 0x80000000, 0x40, 0x0, 0x1, 0xd67a, 0x9, 0x200, 0x493b87f4, 0x6, 0x7a9, 0x3, 0x5, 0x4ae0, 0x8, 0x3ff, 0x6b5, 0x800, 0x6, 0x9, 0x2, 0xa3b, 0x9, 0xfcf, 0x3f, 0x3f, 0x80, 0xd6, 0xea, 0xb8, 0x6ff6, 0x100, 0x1, 0x297, 0x80, 0xb3f3, 0x9, 0x81, 0x200, 0x81c1, 0x9, 0x9, 0xffffd9a6, 0xb4, 0x3, 0x0, 0x0, 0x9, 0x1000, 0x7ff, 0x7f, 0x1, 0x80, 0x7, 0x7ff, 0x9a68, 0x5, 0x5, 0x8001, 0x40, 0xbb5, 0x9, 0xff, 0xffff, 0x2, 0xfffffff9, 0x6, 0x4, 0x81, 0x6e13, 0x3, 0x10001, 0x4, 0x859e, 0x6, 0x7e1, 0x80000000, 0x9, 0x4, 0x2, 0x624, 0x1ff, 0x80000000, 0xfdd, 0x80000000, 0x3, 0x4, 0x80000000, 0x6, 0x3, 0xffffffff, 0x0, 0x4a5, 0x4, 0x9, 0xfff, 0x3ff, 0x9, 0x2, 0x20, 0x6, 0x10001, 0x9, 0xe9f0, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x3, 0x31800, 0xe2, {0x0, 0x2, 0x7, 0x8, 0x800, 0x20}, {0x4, 0x2, 0x1f, 0x21, 0x0, 0xee}, 0x5, 0x5, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x3, 0x1f, 0x0, {0x1f, 0x2, 0x3, 0x4, 0x14ad, 0x4}, {0x7, 0x0, 0x0, 0xff, 0x3, 0x4}, 0x8, 0xfffff209, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2da}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x1, 0x8, 0x7f, 0x2751, 0x8, 0x68e3, 0x1ff, 0xfffffff7, 0x480, 0x5, 0xffffffff, 0x8000, 0x401, 0x3d4, 0x80000001, 0x6, 0x0, 0x2, 0x100, 0x6, 0x800, 0x2, 0x7, 0x526, 0x3, 0x10000, 0x1976e859, 0x4, 0x451, 0x3, 0x0, 0x0, 0x3, 0x2, 0x41, 0x1, 0x1, 0x80, 0x5, 0x3, 0x4, 0xd7f, 0x1000, 0x5, 0x352e, 0x5, 0x0, 0x9, 0x40, 0xffffffff, 0x1, 0x10000, 0x3, 0xfffffff7, 0xc0fa, 0x1, 0x3, 0x0, 0x20, 0x3, 0x1f, 0x4, 0x1000, 0x7, 0x2, 0x9, 0x24000, 0x2, 0x76ae8c6e, 0xc8e1, 0x4, 0x7d3, 0x9, 0x6, 0x322a, 0x8, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x8, 0x1, 0xffffff27, 0x1f, 0x9, 0x0, 0x4, 0xb4c1, 0x6, 0x8, 0x0, 0xe00000, 0x2, 0x6, 0xffffffff, 0x7, 0x3, 0x3f, 0x2, 0x10001, 0x40, 0x2b1, 0x10000, 0x1, 0x1, 0x1, 0x7ff, 0xc203, 0x6, 0x5, 0xfffffff7, 0x7, 0x5, 0x80000001, 0x1, 0x5, 0x10000, 0x5, 0x4a4, 0xffffb38c, 0x4, 0xff, 0x8001, 0x3, 0x400, 0x6a3c3506, 0xfffffff8, 0x6, 0x9, 0x501, 0x20, 0x80000001, 0x9, 0x81, 0x7, 0x80000000, 0x9, 0x5, 0x3, 0x7, 0x88, 0x6, 0x7fff, 0x8, 0x6, 0x3ff, 0x6, 0xfffffff9, 0x94e, 0x4, 0x7, 0x80, 0x1, 0xdad, 0x9, 0x968, 0x5, 0x40, 0xf, 0xd36, 0x1f, 0x1, 0x5, 0xf8, 0x1, 0x4, 0x7, 0xff, 0x9f91, 0x59e, 0x4, 0x8, 0x2, 0x1, 0x7fd7, 0x80000001, 0x80, 0x9, 0x5e5, 0x3, 0x10001, 0x5, 0x7, 0xfffffffa, 0x68e, 0xbe, 0x4, 0x80000000, 0x1f, 0x3, 0x40, 0x4, 0x6, 0x505, 0x0, 0x7fff, 0x100, 0x8, 0xffff, 0x0, 0x5, 0xf2, 0x1, 0xfa22, 0x7, 0x5, 0x3, 0x0, 0x5, 0x7, 0x4, 0x4, 0x8001, 0x2, 0x6, 0x7ff, 0x2, 0x3, 0x2, 0x5, 0x1, 0x1, 0x7, 0x101, 0xde, 0x1ff, 0x3, 0x3, 0x3b4b, 0x3, 0xfffffffe, 0x40, 0x0, 0x9, 0x0, 0x4, 0xff, 0x7f, 0x2, 0xff, 0x3, 0x5c6a, 0x8, 0x9d, 0x1, 0x8, 0x1, 0xc81, 0x800, 0x0, 0x0, 0x10001, 0xd959]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5722}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x65c}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE64={0xc}]]}, {0x13, 0x6, "20511649a73ad34cb806dd4b157b48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x74, 0x9, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x1, 0x2, 0x8}}]}, {0x31, 0x6, "c9066a82f90d46427b8c1ab49e820258898f5ca8ac7c8601e374c9ff5bb0e19c82d18a4020cd1540e1f1ef68e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xcc8, 0x20, 0x0, 0x0, {{0xb}, {0xc6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x7, 0x0, 0x1, 0x8, 0x20, 0x7, 0x3, 0x8001, 0x0, 0xb6c3, 0x177, 0x1, 0x6d, 0x0, 0x8, 0x400, 0x8ef4, 0x5, 0x80, 0x81, 0xa95, 0x3, 0x5, 0x3, 0x60e2b0ef, 0x4, 0x400, 0x800, 0x1, 0x7fffffff, 0x9, 0x9d44, 0x9, 0x6, 0x1, 0x800, 0x80000000, 0x8c, 0x6, 0x10000, 0x16cd, 0x20, 0xffffffff, 0x9, 0x20000, 0x8, 0xfffffffe, 0x611, 0x7, 0x10000, 0x2, 0x9, 0x10001, 0x4, 0x4, 0x3ff, 0x58f7, 0xffff, 0xfffff8c1, 0x3, 0x8, 0x24f, 0x7, 0x80, 0x4, 0x9, 0x0, 0x1, 0x7f, 0x1f0, 0x40000, 0x88df, 0x5e82, 0x6, 0x4, 0x6, 0x624, 0x5, 0x7, 0x1, 0x6, 0x6, 0x20, 0x1, 0x1f, 0x1, 0x7f, 0x6, 0x1, 0x5, 0x401, 0x727, 0x80000001, 0x1, 0x8, 0x0, 0x0, 0x9, 0x200, 0x1, 0xa6ff, 0x80, 0x6, 0x64, 0x0, 0x124, 0x100, 0x9, 0x5881, 0x3, 0x3, 0x7, 0xa7b2, 0x6, 0xdceb, 0x100, 0x81, 0x5, 0x0, 0x8000, 0x1, 0x2, 0x7f, 0x4, 0x1, 0x4, 0xffff0001, 0x4ee8, 0x0, 0x7f, 0x8, 0xffffffff, 0x20, 0x9, 0x0, 0xffffffff, 0x7, 0x0, 0x6b7, 0xa9, 0x200, 0x9, 0x7ff, 0xfffff801, 0x6, 0xffffffe1, 0xcb, 0x3, 0x2, 0x5, 0x6, 0x8001, 0x2, 0x4, 0x7, 0x63, 0x800, 0x7, 0x8001, 0x401, 0x9, 0x1, 0x1, 0x9c, 0x400, 0x30c0, 0xff, 0x4, 0x3, 0x200, 0x9, 0x0, 0x6, 0xc57, 0x7, 0x7213, 0x1, 0x7fff, 0x4, 0x46d0, 0x3, 0x7fff, 0x0, 0xffffff77, 0x7, 0xfffffffe, 0x0, 0x7fffffff, 0x7fffffff, 0x4, 0x6bb, 0x1, 0x8, 0x9, 0x8, 0x0, 0x81, 0x5, 0x7, 0xffffffff, 0x7d07d7e, 0x1, 0x80000, 0x1f, 0x0, 0x0, 0x5, 0x8, 0x3, 0x5, 0x1, 0xfffffffd, 0x8, 0x108, 0x8001, 0x7, 0xb12, 0x1, 0xffff, 0x4, 0x5, 0xd0d4, 0x699, 0x3, 0xd15f, 0xfffffffe, 0x34, 0xc3ce, 0x7fff, 0x7, 0x5, 0x0, 0x6, 0x1000, 0xb4, 0x8, 0x33, 0x129, 0x400, 0xfffffffd, 0xffffffff, 0x2a8e, 0x7fff, 0x0, 0x1000, 0xaef, 0x1f, 0x6e, 0xd49a, 0x8, 0x6, 0x8000, 0x100, 0x10001, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x44, 0xc164, 0x9, 0x873, 0x9, 0xfffffeff, 0x9, 0xf039, 0x7fff, 0x8, 0x295, 0x7, 0x5, 0x10001, 0x3, 0x0, 0x800, 0x3e3, 0xffffffff, 0x3, 0x0, 0x7f, 0x5, 0x3f, 0x9a, 0xf, 0x6, 0x6, 0x240000, 0x8001, 0x6, 0x1, 0x5, 0xb74, 0x7fff, 0x6, 0xf286, 0x6, 0xfffffffb, 0x3f, 0x7, 0x3, 0x6, 0xfffffff8, 0x9, 0x8, 0x5, 0x8, 0x8001, 0xfffffffd, 0x6cdf, 0x2, 0x1000, 0x8, 0x80000000, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2d1f, 0x9, 0x108, 0x1, 0x8, 0x4, 0x1ff, 0x1d2, 0x7, 0x14ba, 0x535, 0x6, 0x8, 0xffff, 0x3, 0xc3f0, 0x0, 0x0, 0x101, 0x0, 0xce2, 0x1000, 0x3, 0x7, 0xc4b4, 0xfffffc01, 0x6, 0x80000001, 0x78c, 0x0, 0x6, 0xffff, 0x3f, 0x7, 0xfff, 0x5, 0x55, 0x1000, 0x6, 0x4, 0x0, 0x401, 0x5, 0x7, 0xfffffff9, 0x7fffffff, 0x5bffe502, 0xfffffeff, 0xffff3da8, 0x1, 0x80000000, 0x80000000, 0x1ff, 0x8000, 0x5, 0x7, 0xd02b, 0x20, 0x400, 0x135, 0x6, 0x8, 0x1, 0xfffffa16, 0x9, 0x1, 0x4, 0x1, 0x4c0, 0x2, 0x3, 0xffff1f59, 0x2, 0x3f, 0x5, 0x8, 0x7, 0x6, 0x2cb1, 0x2, 0xe7, 0x50942a25, 0x453a86c2, 0x2, 0xd4, 0x400, 0x400, 0x9, 0xd4, 0x7, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x0, 0x7, 0x8000, 0x81cd, 0xf1, 0xffffffc1, 0x3, 0xce3, 0xfffeffff, 0x3ff, 0x80, 0x3, 0xf6d, 0x9, 0xfffffff8, 0x5, 0x3, 0x400, 0x7ff, 0x9, 0xb7e3, 0x0, 0x2, 0x0, 0x4, 0x10001, 0xfffffff7, 0x7ff, 0x9, 0x0, 0x1c6f, 0x8001, 0x2, 0x200, 0x6be9, 0x7f, 0x100, 0x1, 0x3ff, 0x615, 0x5fd, 0x5, 0x3, 0x80, 0xa1f5, 0x60a8, 0x4, 0x3ff, 0x9, 0x6b, 0x0, 0x9, 0x4, 0xa00, 0x8961, 0x0, 0x2, 0x1, 0x8, 0x100, 0xffff24ac, 0x79d9, 0x8, 0x4214, 0x8, 0x7861, 0x3, 0x81, 0x400, 0x1ff, 0x7, 0xd38, 0x1000, 0x3ff, 0x5, 0x4, 0x5f6a, 0x80000000, 0x9, 0x2, 0x33, 0x8, 0x0, 0x0, 0x4ae, 0x6, 0x9, 0x6, 0x1, 0x0, 0x20000000, 0x2, 0x4, 0x1, 0x1b17, 0xf7, 0x2, 0x401, 0xff, 0x3c59]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8ab, 0xfffffffe, 0x6, 0x5, 0xee38, 0xa4, 0x6, 0x8, 0x8, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x1000, 0x401, 0x101, 0x0, 0x8, 0xffffffa8, 0xb2e4, 0x9, 0x20, 0xff, 0x6, 0x10001, 0x3, 0x200, 0x9, 0x9273, 0x8000, 0xe56, 0x4, 0xfffffeff, 0x913b, 0x7, 0x7, 0x3, 0x2, 0x8, 0x6, 0x40, 0x80, 0x6, 0x7fffffff, 0x833, 0x7, 0x8001, 0x4, 0x9, 0xfff, 0x5, 0x52b9, 0xc5c, 0x35f19359, 0x5f, 0x162a, 0x5, 0x10000, 0xb567, 0xfffffffe, 0x7, 0x0, 0x5, 0x80000000, 0xec9d, 0x0, 0x800, 0x800, 0x7fffffff, 0x7fffffff, 0x100, 0x6, 0x3ff, 0xc6bc, 0x34d24f5c, 0x9e5, 0xfe, 0x8, 0x54, 0xfffffffc, 0x2, 0x800, 0x3, 0x4, 0xa40a, 0xa662, 0xd1, 0xd2, 0x6, 0x20, 0x6, 0x7fff, 0x0, 0x400, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0xff, 0x8, 0x2, 0x1000, 0x9, 0x20, 0x5e6, 0x3f, 0x9352, 0x800, 0x5, 0x401, 0x80000000, 0x4, 0x4, 0x6, 0x2, 0x401, 0x6, 0x40, 0x4, 0x2, 0x81, 0x2, 0x9, 0x3f, 0xffff1306, 0x0, 0xffff, 0x9, 0xe3, 0x9, 0x4, 0x6, 0x0, 0x3, 0xfffffff7, 0x5, 0x4, 0x1, 0x0, 0xc34d, 0x2, 0x80, 0x10, 0x6, 0x200, 0xfe8, 0x5, 0x3, 0x8f7, 0x1, 0x0, 0xfff, 0x1, 0x10000, 0x6, 0x401, 0xe7c3, 0xffff16a8, 0x6, 0x0, 0x2, 0x1, 0x7, 0xfffffffd, 0x3, 0x3, 0x29b, 0xff, 0x7, 0x7fff, 0x7, 0xfffffffd, 0x6, 0x2, 0x3ff, 0x8803, 0x7fffffff, 0x1, 0xff, 0x1f, 0x81, 0x81, 0x5, 0x80000001, 0x8001, 0x40, 0x2, 0x1819, 0x8, 0x6, 0x8, 0x0, 0x8001, 0xfffffff7, 0xfff, 0x7f, 0xfffffff7, 0xffffff80, 0x101, 0x3, 0x5, 0x1000, 0xffffffff, 0x6, 0x0, 0x100, 0x1, 0x2, 0x6, 0x8, 0x7f, 0x4, 0xf9, 0x4, 0x7, 0x1, 0x10001, 0x8001, 0x7, 0x84, 0x200, 0x1, 0x0, 0x1, 0x7, 0x6, 0xb08, 0x4, 0x10001, 0x9ae5, 0x4, 0x294e, 0x3ff, 0x97, 0x6, 0x2, 0x6, 0x1, 0x40, 0x3, 0x8, 0x56, 0x25cfdd7b, 0x972, 0x0, 0xe68, 0x3, 0x1, 0x7, 0x5, 0xfffffffb, 0xffffff81, 0x6, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x33, 0x6, "08ee66eee7556081bfe19575eb071dabaf7b477b0e72be1f628227577771d0ed7f9b7093ce9d93e26168015645e7b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x154, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x63, 0x1f, 0x6, 0x2, 0xb4ba}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}]}, {0xe7, 0x6, "d87a34bc07d07d771acecb62c75b65ef50f1b0cf84809ab2add296653a0051282f9614fd8f72a6ca918d0c0dc8cd3fe00449e98c023cc9bf02a56797a743cce2b986086f82b06471199f16d65f3199882aaed5f35863ebef7b3fd6109d70f0e85759e7d5a12fab8f779baa92f28e198cab062bebcc0a97ccce6965fd70b8ede358d25b2493714d3deb63c9025827a0b8c2702e197f76d109a702794fd598cf9f77341ea65faa968ce7e05a9a96ef095d3b99d73d1aaea3ac41e7dbef733c2a5f7f746413cc7d7719b45b41e6ba2a78a7abaefcfecf649f7e4914bccd38b2a992fe3805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x188, 0xe, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xa4, 0xd, 0x76b5, 0x81}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0x3, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8d5, 0x3, 0x800, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x7, 0x101, 0x7ff}, 0x39}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xad, 0x10000000, 0x860, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0xf4, 0x583f}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x2, 0x758, 0xb5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2c, 0x6, 0x10000000, 0x40, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x5, 0x2, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x4, 0x5, 0x3341e7e2}, 0x7f}}]}, {0x3f, 0x6, "bc6cca53ee934de92dcc774a36ed326af872d0983384c0f4f6651502d84e23e3eb90f2ecadf0b0620fa71a4af093f3ae531021d0f22e23de0fdbad"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ctinfo={0x10b0, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x296, 0x7fff, 0x7, 0x4, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1ff, 0x8000, 0x6, 0x3ff, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfb7, 0x0, 0x1, 0x1000, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xcbd}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x700d0b1399c71ca1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x64, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "ecc952d1a7a194e3be26ff3d0f498e14a4ab02fb9dc8581b9731d693a5dab00dbad78294670f43062b5c09046b2e1b7ae727ed911cc217"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x10c, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf2b, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x166c, 0xffffffffffffffff}}]}, {0xc5, 0x6, "268cd7b56bc2456bff7942deb2640bad08d7f050a1a0e5375462f2e8b31d07874b3e9cb0723eee7eb36d1bca5d445ef29d6fbfbb1ba32b03d82d8d10bf8692f30c2b2be5eba2bc7a5392bf2698d74b5566aeafd200463d32a656fd04f1df5cabd269dcef308ffc50842c5418dae500cf592302038c6780980157faae2249b49ebd34cd488c3b8b0eb871f69ec0c133c9beef35773a0d8d7531201ec4aef095bfa2132dfd9ec1f245d02c92ce10966805191cc874e3f636fdf8269e3bd3655a0236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xbbc18ec07321938, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x384, 0x2, [@m_mpls={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xc8}, @TCA_MPLS_TTL={0x5, 0x7, 0xe0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x79b25}]}, {0x65, 0x6, "39505238f7cfef51d6f05254463af84c2ac0f3a7a5c78fa036cdc8e62d9912e78c040456005ffa0b7b33468138251d61633905fd9e06989a26d31221943c5625cf64af46d3bd344c774a008afada820a77281746aaac8561ebe7fc8f8082476540"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x124, 0x18, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x3e, 0x5, 0x6}, {0x7f, 0x7, 0x5, 0x6}, {0x0, 0x1, 0x81, 0xffff0001}, {0x8, 0x40, 0x5, 0xfb}, {0x3, 0x2, 0x2, 0x3}, {0x0, 0x6, 0x20, 0xfffffffb}, {0x1, 0x6, 0x1, 0x6}, {0xffff, 0x3f, 0x80, 0x3238054e}]}]}, {0xb7, 0x6, "ffe465cae83f3974a8e6e8d3624ed8883a19750d4f07143a726cb87a425dc21000633df3b9d448ea8e75217213dedd7ef28f415f8e65111231f39bbde284f5609534de6ff08b54b31e485699b130486ceae1a67d8e6cb6e389e9055fdde1c11e43793c4579f60ef03a196c0d81f037a0a3bc5b6dbaaa21c7768aef736fdbf648f4bedbace3f2ef8d1afa0ca63591830dc8e74281dc0abf7321906619d5dea51391b905b5b2bddedaea7b165f4cc4e96827dba2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffde, 0x496, 0x2, 0x3ff, 0x4}}]}, {0x3a, 0x6, "ab249372bf78ab78045205b0d69be58be177e03a6e7b17d16cab95bfd9497296ccdc368f004636923354e6712700d5d2f7701e40c165"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xef35, 0xd85, 0x8, 0x3c7, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7f, 0x2, 0xfffffffe, 0xa17f}, @multicast2, @rand_addr=0x64010100}}]}, {0x53, 0x6, "47baf38f314c3a74f830ad8f7fbfcfe4888905b1caba51ba1bbe09433aa136fcba1c31837b7ea27332b96b19134aa1a1e54ee911fe647b678e18008588dfc2fcef7740f37f27cad0501160a71883e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x4c, 0xf, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x11, 0x6, "567ad65c3749d004b67565ef5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xb}}]}}]}, 0x30b0}}, 0x0) [ 2243.266714][T29304] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 04:31:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000040601020000000000e10000060000010500010007"], 0x44}}, 0x0) 04:31:39 executing program 0: syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2243.551934][T29314] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 04:31:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000040601020000000000e10000060000010500010007"], 0x44}}, 0x0) [ 2243.720108][T29319] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2244.144583][ T27] audit: type=1326 audit(1676867500.256:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29292 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7549 code=0x7fc00000 04:31:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="0ab6d49ccbed"}, 0x0, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}}, 0x0) 04:31:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 04:31:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000007f000000000000005504000001ed0a002500000017ffffffbf400000000000007b1a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69002435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e420fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7d90692a4380548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7f038aab8255ffdea0000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6dc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eac7e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000000000000000000000000000400000000000000003860000ff010300000000000000407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c0230dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd616e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f71150212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b6c38e70380bb2f57e8767dc811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e5343571a95b12aec06a9f581ea97c3f03add23f14c8db5555c62de4f626483632a2ab549000ccd3a3477f88dd6e66bbb6a8083432a94081f72ed7fec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97b6d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd1f8bb72b3e5250b0d0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a97c1c6ca791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b8697741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcdd938bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f9b1883b86f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f8765a2616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce90146b444338c1f7a2e9b1888d64e861583f0e0022121248465d37e7c386f8c414dff95defb464172998a684e21ca960897c32a1274535d445c1565697e6cbcfcd7e27e37ea9c80a5b073"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 04:31:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'gretap0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5000) 04:31:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 04:31:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004500)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='oom_adj\x00') r4 = getpid() sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x1, 0x2) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000500)=""/223, 0xdf}], 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) r7 = socket$inet(0x2, 0x1, 0x0) shutdown(r7, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x20000000) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) [ 2254.571511][ T27] audit: type=1326 audit(1676867510.686:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29322 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ffc549 code=0x7fc00000 04:31:50 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) write$nbd(r0, &(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x0, 0x0, "82b0cfc433790d771538be0631e8bd3410000088010000000074000096afda2a87223ba7f400"/48}, 0x40) 04:31:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000001780), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8924, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x200000, 0x802, 0x0, 0x2, [0x0, 0x1, 0x9], [0x0, 0x2], [0xfffffffe], [0x8000000000000001]}) 04:31:50 executing program 4: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 04:31:50 executing program 3: capset(&(0x7f0000001580)={0x20080522}, &(0x7f00000002c0)) r0 = gettid() syz_clone3(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001040)=[r0], 0x1}, 0x58) 04:31:50 executing program 5: r0 = add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f00000005c0)="bca43575bdca16f84faac686ae2d4a01b5d91745562285474e0d5f071f6eddcfbf37497d7ef87ee27d0cc3b222a2e16cb19e4271dfbe86d41df338c301f99565af588c976c9a335e824ddae3d016a978646a2e9f8d88ebc67037f459e28ff50d1ae29765ac21128a2ec78807b60265ec50675cef84279cf6015ba86f769a3d7b20917b78e9f7054c22647c3c972861b918f3100d4acc04db944ecf28d2e03fea0ec8303b97a94c3fba3258269e093a4ab18a3e768cf2e9b48da783d0afecf3982f3241677d7ce919124d613b832b6f80592878ebe6337a5773", 0xd9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="bae01e7c50bca5734c8d76d8db61417626d0f0f70fe97882a412ef142f2f5993beceeb9c7fd016111e999d889d35e31140bc551b05aef123ac26949c0e3c14aab8fd647be1c3986f7edf1276b5334e2ba877492542d83d4f46279267dab4e3973ffc77bf9d631b7295fcfd497a6cd4f2eb84340b8fd09c44a9b1830e43e010fec5de427296a9cddfb5c84994b9a28ad9565df597456569ae37cff3d582a16c3881c1b4a6ba98b979798ca33c77f03e38536018fc9328685186", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000440)={r2, r0, r1}, &(0x7f0000000480)=""/145, 0x2a, &(0x7f0000000580)={&(0x7f00000002c0)={'wp256-generic\x00'}}) 04:31:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 04:31:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r0, r1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 04:31:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x4}, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x32, 0x0, 0x88) 04:31:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 04:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000007e80)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0800ffff00000000000000000b0001006367726f7570000044000200400002003c"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0800ffff0000ffffff9e00000b0001006367726f75700000440002"], 0x7c}}, 0x0) 04:31:59 executing program 3: syz_usb_connect(0x0, 0x2c, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x3d, 0x10, 0x6d, 0x8, 0x19d2, 0xff5d, 0x90c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xff, 0xff, 0xff, 0x0, [@generic={0x8, 0xb, "7e00cf356c49"}]}}]}}]}}, 0x0) 04:31:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', "55f73b88d58f986163f06c63e9d23afb04af48dd85da749fc21f5b6bbd7238"}, 0x23) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:31:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x4}, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x32, 0x0, 0x88) 04:31:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004500)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='oom_adj\x00') r4 = getpid() sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x1, 0x2) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000500)=""/223, 0xdf}], 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) r7 = socket$inet(0x2, 0x1, 0x0) shutdown(r7, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x20000000) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) [ 2263.100374][T29368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:31:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x4}, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x32, 0x0, 0x88) [ 2263.243607][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.276462][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.351889][T29368] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.369119][T28176] usb 4-1: new high-speed USB device number 115 using dummy_hcd 04:31:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x4}, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x32, 0x0, 0x88) 04:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000007e80)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0800ffff00000000000000000b0001006367726f7570000044000200400002003c"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0800ffff0000ffffff9e00000b0001006367726f75700000440002"], 0x7c}}, 0x0) [ 2263.479657][T29382] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2263.609132][T28176] usb 4-1: Using ep0 maxpacket: 8 04:31:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) [ 2263.644992][T29394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.729448][T28176] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2263.827075][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.899371][T28176] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff5d, bcdDevice=90.c2 [ 2263.940602][T28176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:32:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', "55f73b88d58f986163f06c63e9d23afb04af48dd85da749fc21f5b6bbd7238"}, 0x23) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2263.983101][T28176] usb 4-1: Product: syz [ 2263.988309][T29394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2264.027911][T28176] usb 4-1: Manufacturer: syz [ 2264.046803][T28176] usb 4-1: SerialNumber: syz [ 2264.064852][T29394] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2264.104180][T28176] usb 4-1: config 0 descriptor?? 04:32:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000007e80)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0800ffff00000000000000000b0001006367726f7570000044000200400002003c"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0800ffff0000ffffff9e00000b0001006367726f75700000440002"], 0x7c}}, 0x0) [ 2264.204386][T28176] option 4-1:0.0: GSM modem (1-port) converter detected [ 2264.298662][T29411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2264.419171][T28176] usb 4-1: USB disconnect, device number 115 [ 2264.435725][T28176] option 4-1:0.0: device disconnected [ 2264.492915][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:32:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) 04:32:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', "55f73b88d58f986163f06c63e9d23afb04af48dd85da749fc21f5b6bbd7238"}, 0x23) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:32:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000007f000000000000005504000001ed0a002500000017ffffffbf400000000000007b1a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69002435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e420fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7d90692a4380548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7f038aab8255ffdea0000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6dc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eac7e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000000000000000000000000000400000000000000003860000ff010300000000000000407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c0230dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd616e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f71150212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b6c38e70380bb2f57e8767dc811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e5343571a95b12aec06a9f581ea97c3f03add23f14c8db5555c62de4f626483632a2ab549000ccd3a3477f88dd6e66bbb6a8083432a94081f72ed7fec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97b6d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd1f8bb72b3e5250b0d0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a97c1c6ca791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b8697741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcdd938bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f9b1883b86f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f8765a2616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce90146b444338c1f7a2e9b1888d64e861583f0e0022121248465d37e7c386f8c414dff95defb464172998a684e21ca960897c32a1274535d445c1565697e6cbcfcd7e27e37ea9c80a5b073"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 04:32:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000007e80)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0800ffff00000000000000000b0001006367726f7570000044000200400002003c"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0800ffff0000ffffff9e00000b0001006367726f75700000440002"], 0x7c}}, 0x0) 04:32:03 executing program 3: syz_usb_connect(0x0, 0x2c, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x3d, 0x10, 0x6d, 0x8, 0x19d2, 0xff5d, 0x90c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xff, 0xff, 0xff, 0x0, [@generic={0x8, 0xb, "7e00cf356c49"}]}}]}}]}}, 0x0) 04:32:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) [ 2267.629200][T28176] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2267.720734][T29422] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 04:32:03 executing program 5: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) write$damon_contexts(r0, &(0x7f0000000040)=ANY=[], 0x2f00) [ 2267.869068][T28176] usb 4-1: Using ep0 maxpacket: 8 04:32:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) [ 2267.990264][T28176] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2268.136270][T29442] __nla_validate_parse: 6 callbacks suppressed [ 2268.136293][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2268.160003][T28176] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff5d, bcdDevice=90.c2 [ 2268.182620][T28176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.215244][T28176] usb 4-1: Product: syz [ 2268.232235][T28176] usb 4-1: Manufacturer: syz [ 2268.250463][T28176] usb 4-1: SerialNumber: syz [ 2268.297027][T28176] usb 4-1: config 0 descriptor?? [ 2268.362117][T28176] option 4-1:0.0: GSM modem (1-port) converter detected 04:32:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', "55f73b88d58f986163f06c63e9d23afb04af48dd85da749fc21f5b6bbd7238"}, 0x23) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2268.662932][T28774] usb 4-1: USB disconnect, device number 116 [ 2268.675512][T28774] option 4-1:0.0: device disconnected 04:32:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) 04:32:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) [ 2268.869533][T29456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:32:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) [ 2269.118960][T29464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:32:05 executing program 3: syz_usb_connect(0x0, 0x2c, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x3d, 0x10, 0x6d, 0x8, 0x19d2, 0xff5d, 0x90c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xff, 0xff, 0xff, 0x0, [@generic={0x8, 0xb, "7e00cf356c49"}]}}]}}]}}, 0x0) 04:32:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) [ 2269.269854][T29467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2269.639193][T28774] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2269.899091][T28774] usb 4-1: Using ep0 maxpacket: 8 [ 2270.030186][T28774] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2270.199334][T28774] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff5d, bcdDevice=90.c2 [ 2270.208493][T28774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.239588][T28774] usb 4-1: Product: syz [ 2270.243841][T28774] usb 4-1: Manufacturer: syz [ 2270.248489][T28774] usb 4-1: SerialNumber: syz [ 2270.306767][T28774] usb 4-1: config 0 descriptor?? [ 2270.351410][T28774] option 4-1:0.0: GSM modem (1-port) converter detected [ 2270.608332][T28176] usb 4-1: USB disconnect, device number 117 [ 2270.619425][T28176] option 4-1:0.0: device disconnected 04:32:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000007f000000000000005504000001ed0a002500000017ffffffbf400000000000007b1a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69002435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e420fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7d90692a4380548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7f038aab8255ffdea0000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6dc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eac7e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000000000000000000000000000400000000000000003860000ff010300000000000000407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c0230dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd616e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f71150212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b6c38e70380bb2f57e8767dc811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e5343571a95b12aec06a9f581ea97c3f03add23f14c8db5555c62de4f626483632a2ab549000ccd3a3477f88dd6e66bbb6a8083432a94081f72ed7fec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97b6d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd1f8bb72b3e5250b0d0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a97c1c6ca791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b8697741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcdd938bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f9b1883b86f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f8765a2616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce90146b444338c1f7a2e9b1888d64e861583f0e0022121248465d37e7c386f8c414dff95defb464172998a684e21ca960897c32a1274535d445c1565697e6cbcfcd7e27e37ea9c80a5b073"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 04:32:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) 04:32:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) 04:32:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) 04:32:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) 04:32:09 executing program 3: syz_usb_connect(0x0, 0x2c, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x3d, 0x10, 0x6d, 0x8, 0x19d2, 0xff5d, 0x90c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xff, 0xff, 0xff, 0x0, [@generic={0x8, 0xb, "7e00cf356c49"}]}}]}}]}}, 0x0) [ 2273.810426][T29484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2274.027310][T29485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2274.049209][T27515] usb 4-1: new high-speed USB device number 118 using dummy_hcd 04:32:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x38, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) [ 2274.309150][T27515] usb 4-1: Using ep0 maxpacket: 8 04:32:10 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mlock(&(0x7f00001e5000/0x3000)=nil, 0x3000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 2274.374672][T29497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2274.439290][T27515] usb 4-1: config 0 interface 0 has no altsetting 0 04:32:10 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mlock(&(0x7f00001e5000/0x3000)=nil, 0x3000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 2274.599158][T27515] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff5d, bcdDevice=90.c2 04:32:10 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000004080)={@sco={0x1f, @none}, {0x0}, 0x0}, 0xa0) 04:32:10 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mlock(&(0x7f00001e5000/0x3000)=nil, 0x3000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 2274.730356][T27515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.787235][T27515] usb 4-1: Product: syz [ 2274.819140][T27515] usb 4-1: Manufacturer: syz [ 2274.862615][T27515] usb 4-1: SerialNumber: syz 04:32:11 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mlock(&(0x7f00001e5000/0x3000)=nil, 0x3000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) [ 2274.920975][T27515] usb 4-1: config 0 descriptor?? [ 2275.001323][T27515] option 4-1:0.0: GSM modem (1-port) converter detected [ 2275.379064][T28774] usb 4-1: USB disconnect, device number 118 [ 2275.394444][T28774] option 4-1:0.0: device disconnected 04:32:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) getsockname$l2tp(r0, 0x0, &(0x7f0000000100)) 04:32:18 executing program 4: mq_unlink(&(0x7f0000000080)='\x00') 04:32:18 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6905, 0x0, 0x0, 0x0, 0x3f00) dup(0xffffffffffffffff) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 04:32:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x88) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5ae}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x47) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) 04:32:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef6a80277bec001208000300ff000000bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955f947ee2b49e33538afa8af92347510f0b56a20ff27fff70fdd02f0fa5", 0x89}], 0x1}, 0x0) 04:32:18 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) 04:32:18 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x81000002, 0x0) 04:32:18 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000000c0)) 04:32:18 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0684113, &(0x7f0000010380)) 04:32:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:18 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0684113, &(0x7f0000010380)) 04:32:18 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0684113, &(0x7f0000010380)) 04:32:18 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x81000002, 0x0) 04:32:18 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6905, 0x0, 0x0, 0x0, 0x3f00) dup(0xffffffffffffffff) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 04:32:19 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0684113, &(0x7f0000010380)) 04:32:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:19 executing program 3: keyctl$restrict_keyring(0x3, 0xfffffffffffffffc, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='logon\x00', 0x0) [ 2288.020954][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.027346][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:32:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:27 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x81000002, 0x0) 04:32:27 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6905, 0x0, 0x0, 0x0, 0x3f00) dup(0xffffffffffffffff) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 04:32:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:27 executing program 3: keyctl$restrict_keyring(0x3, 0xfffffffffffffffc, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='logon\x00', 0x0) 04:32:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:27 executing program 3: keyctl$restrict_keyring(0x3, 0xfffffffffffffffc, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='logon\x00', 0x0) 04:32:27 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x81000002, 0x0) 04:32:27 executing program 3: keyctl$restrict_keyring(0x3, 0xfffffffffffffffc, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='logon\x00', 0x0) 04:32:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x20, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0xc, 0x16, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary='@'}]}]}, 0x20}], 0x1}, 0x0) 04:32:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, 0x20000004, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0xa9, &(0x7f0000000400)=""/169, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, r1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x7, &(0x7f0000000400)=@framed={{}, [@call, @generic, @map_fd={0x18, 0x7}]}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, 0x0}, 0x80) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000100)=0x6e, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gre0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) [ 2291.771035][T29578] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 04:32:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff7, 0x1) 04:32:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:34 executing program 3: syz_io_uring_setup(0x759d, &(0x7f0000000780), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/177) 04:32:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:34 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6905, 0x0, 0x0, 0x0, 0x3f00) dup(0xffffffffffffffff) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 04:32:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, 0x20000004, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0xa9, &(0x7f0000000400)=""/169, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, r1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x7, &(0x7f0000000400)=@framed={{}, [@call, @generic, @map_fd={0x18, 0x7}]}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, 0x0}, 0x80) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000100)=0x6e, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gre0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 04:32:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100003000500000002000020d3"]) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 04:32:34 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x29, 0xe, 0x0, 0x0) [ 2298.691082][T29606] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 04:32:34 executing program 3: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000800)='./bus\x00', &(0x7f00000000c0)='ext3\x00', 0x0, &(0x7f0000000080)='debug') 04:32:35 executing program 3: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000800)='./bus\x00', &(0x7f00000000c0)='ext3\x00', 0x0, &(0x7f0000000080)='debug') 04:32:35 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) sendmmsg(r0, 0x0, 0x0, 0x0) 04:32:35 executing program 3: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000800)='./bus\x00', &(0x7f00000000c0)='ext3\x00', 0x0, &(0x7f0000000080)='debug') 04:32:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00', 0x400}) 04:32:43 executing program 3: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000800)='./bus\x00', &(0x7f00000000c0)='ext3\x00', 0x0, &(0x7f0000000080)='debug') 04:32:43 executing program 4: r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x20000000, 0x4) 04:32:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) 04:32:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, 0x20000004, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0xa9, &(0x7f0000000400)=""/169, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, r1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x7, &(0x7f0000000400)=@framed={{}, [@call, @generic, @map_fd={0x18, 0x7}]}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, 0x0}, 0x80) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000100)=0x6e, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gre0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 04:32:43 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = gettid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001fff8c020000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000a00db839f10594a1e55e48b3318eb2b7647c73142ca"], 0x44}}, 0x0) 04:32:43 executing program 3: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ca3000/0x4000)=nil, &(0x7f00005bd000/0x1000)=nil, 0x4000, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0xc511, 0x20800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) shutdown(r1, 0x1) 04:32:43 executing program 0: memfd_secret(0x4f2b922aa787ed6b) 04:32:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x25c, 0xf0, 0x0, 0xd0e0000, 0x0, 0x8f, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x4, 0x0, {[{{@ip={@multicast1=0xe000d400, @local, 0x0, 0x0, 'veth0_macvtap\x00'}, 0xee02, 0xa8, 0xf0, 0x0, {0x700000000000000}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x0, 0x64}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b8) 04:32:44 executing program 3: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ca3000/0x4000)=nil, &(0x7f00005bd000/0x1000)=nil, 0x4000, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0xc511, 0x20800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) shutdown(r1, 0x1) [ 2308.033984][T29643] xt_CT: You must specify a L4 protocol and not use inversions on it 04:32:44 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 04:32:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000500)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 04:32:53 executing program 3: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ca3000/0x4000)=nil, &(0x7f00005bd000/0x1000)=nil, 0x4000, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0xc511, 0x20800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) shutdown(r1, 0x1) 04:32:53 executing program 2: r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0xaf020fa88faee562}) 04:32:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, 0x20000004, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0xa9, &(0x7f0000000400)=""/169, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, r1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x7, &(0x7f0000000400)=@framed={{}, [@call, @generic, @map_fd={0x18, 0x7}]}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, 0x0}, 0x80) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000100)=0x6e, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gre0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 04:32:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x300}]}, 0x20}}, 0x0) 04:32:53 executing program 4: io_uring_setup(0x37d9, &(0x7f00000001c0)={0x0, 0x29a0, 0xc0a}) 04:32:53 executing program 3: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ca3000/0x4000)=nil, &(0x7f00005bd000/0x1000)=nil, 0x4000, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0xc511, 0x20800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) shutdown(r1, 0x1) 04:32:53 executing program 2: futex_waitv(&(0x7f0000001300)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:32:53 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x0, "ff8b0d6975ea"}) 04:32:53 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x0, "ff8b0d6975ea"}) 04:32:53 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x0, "ff8b0d6975ea"}) 04:32:53 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x0, "ff8b0d6975ea"}) 04:32:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:54 executing program 5: syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 04:32:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x81}, {}, {}, {0x7e, 0x0, 0x0, '\x00', 0xfc}, {0xff, 0x0, 0xb8}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {}, {0x4a}, {0x0, 0x2, 0x0, '\x00', 0x3}, {}, {}, {}, {}, {0xff}, {0x73}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x1, 0x20], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:32:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x105) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0796f23526ec0fd97f734c4c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be5cb0417d33d3ab25493418494d9d10d76e603129e9a72657513f2e858f41a46f9ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e96443283ddedd93907cedd49e0c5752f755849953957143a0380d1f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c359afe73947afebdf5536ee2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x2) getsockname$unix(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x1cc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bf784b918513a7799994e863ce9a4b0838d54d2599646ef9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="51d7957e6bd2904fbaac7ae8a992dbdc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="63a73d4a06683ce99c0a66a03221bc66"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8ee}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4905ef45f83455ffd035c879e5897599"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "75dc0dfbc6f2c83e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "93442468291e3644"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="232495d23aa7454c9eb1872f1ec9e48fedc087dd3bc9136876b7fc5999b55d1c"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f00cf2c0be4c98e78f285357b484eadb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c8384c56d4b72fa4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="595f3769cc7d43e7d3321b32aa83a8236bedbe14bcaa1bf255bb22c272eb9a0d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2a3b94f7b2e8bd50c0cd272b95984c8b264a16015a624f85"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d408312c9fbdf7f5a63696979786817a984a2813e78b426e"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5076b328492eb8c9ae2676f4a82698ab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ba6ed40da51c77631afd55c06aea5734"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b5c5eefe6e8bd58e08f5e4e4cf47d28d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a23b9171334760965cb397ecb060d14f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="eff94eef06aeb5464bbc66cfa23c2465"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "064b925776f26543"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2249dd99ef4c33875905b1cfe1d2228afd67e39b17f44b97"}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80020}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_clone3(&(0x7f0000000800)={0x1201000, &(0x7f0000000300), &(0x7f0000000240), 0x0, {0x810}, &(0x7f00000004c0)=""/212, 0xd4, 0x0, 0x0, 0x0, {r5}}, 0x58) setresgid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 04:32:54 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fbba97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004390"], 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40010022) 04:32:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:32:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x744d104d567d8897, 0x0, "1e7a283f508b61b2561256145cdf1c660ed3405ddc84f376e09980af781b1400"}) 04:32:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0xf, 0x21}) 04:32:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:33:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:33:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:33:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delpolicy={0x5c, 0x14, 0xee15ba5303db9995, 0x0, 0x0, {{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@policy_type={0xa, 0x10, {0x6}}]}, 0x5c}}, 0x0) 04:33:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:33:04 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) 04:33:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:33:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x1b}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) 04:33:04 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/net\x00') setns(r0, 0x40000000) 04:33:04 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000180)={@local, @empty, 0x0, "60afd3c84a6fef2c4d71ad566a8463ccd7f3715b49e8a38f26c3e0ffa1a4dfb5"}, 0x3c) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000080)={@local, @empty, 0x0, "2b50e7f5826e9837c37d394634fa04c545bf4dd1208cb605f6daf9da66ad1196"}, 0x3c) 04:33:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2}]) 04:33:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000024c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 04:33:04 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000940)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x20) 04:33:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x64) 04:33:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4, &(0x7f0000000100)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) getpgrp(0x0) r3 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) ptrace$getregs(0xc, 0x0, 0x55, &(0x7f0000000280)=""/203) flistxattr(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x100002, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}], [{@fowner_eq}]}}) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) open$dir(0x0, 0x80000, 0x46) 04:33:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2}]) 04:33:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)) 04:33:13 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) 04:33:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x168) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000280)='./bus\x00', 0xa5) io_setup(0x202, &(0x7f0000000200)) r2 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@local, @multicast2, @private}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200000002) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004106) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x2, 0x7fffffffffffffff, 0x7f}) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000380)=0x7fff, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xc63b9e35) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0d1) 04:33:13 executing program 0: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000040)=[r1], 0x1) 04:33:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x10}, 0x0, 0x0, 0x0, 0x0) 04:33:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) recvmmsg$unix(r2, 0x0, 0x0, 0x10100, 0x0) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendfile(r3, r4, 0x0, 0x1dd00) 04:33:13 executing program 5: creat(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r2}, [@IFLA_CARRIER={0x5}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x2}]}]}, 0x34}}, 0x0) 04:33:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2}]) 04:33:13 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xfffffffffffffffc, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x4800) 04:33:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) [ 2337.635328][T29794] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 2337.635362][T29794] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 04:33:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000180)="fe", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 04:33:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xfffffffffffffffc, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x4800) 04:33:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x2}]) 04:33:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:33:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x168) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000280)='./bus\x00', 0xa5) io_setup(0x202, &(0x7f0000000200)) r2 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@local, @multicast2, @private}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200000002) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004106) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x2, 0x7fffffffffffffff, 0x7f}) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000380)=0x7fff, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xc63b9e35) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0d1) 04:33:23 executing program 1: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) 04:33:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c4, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2fc, 0x1fc, 0x1fc, 0x2fc, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@connlabel={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc000, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 04:33:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xfffffffffffffffc, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x4800) 04:33:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c4, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2fc, 0x1fc, 0x1fc, 0x2fc, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@connlabel={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc000, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 04:33:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c4, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2fc, 0x1fc, 0x1fc, 0x2fc, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@connlabel={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc000, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 04:33:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c4, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2fc, 0x1fc, 0x1fc, 0x2fc, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@connlabel={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc000, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 04:33:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xfffffffffffffffc, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x4800) 04:33:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/166}, {&(0x7f0000000100)=""/20}, {&(0x7f0000000240)=""/238}, {&(0x7f0000000140)=""/51}, {&(0x7f0000000180)=""/128}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/12}, {&(0x7f00000003c0)=""/54}], 0x0, &(0x7f0000000480)=""/160}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000540)=""/212}, {&(0x7f0000000640)=""/104}, {&(0x7f00000006c0)=""/116}, {&(0x7f0000000740)=""/90}, {&(0x7f00000007c0)=""/213}, {&(0x7f00000008c0)=""/242}, {&(0x7f00000009c0)=""/168}, {&(0x7f0000000a80)=""/177}, {&(0x7f0000000b40)=""/36}, {&(0x7f0000000b80)=""/157}], 0x0, &(0x7f0000000d00)=""/128}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000011c0)=""/205}, {&(0x7f0000000e80)=""/147}, {&(0x7f0000000f40)=""/140}], 0x0, &(0x7f0000001040)=""/140}}], 0x3, 0x40, 0x0) 04:33:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 04:33:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000180)="fe", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 04:33:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:33:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x168) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000280)='./bus\x00', 0xa5) io_setup(0x202, &(0x7f0000000200)) r2 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@local, @multicast2, @private}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200000002) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004106) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x2, 0x7fffffffffffffff, 0x7f}) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000380)=0x7fff, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xc63b9e35) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0d1) [ 2349.464463][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.471133][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:33:29 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x24008800, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 04:33:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:33:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x168) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000280)='./bus\x00', 0xa5) io_setup(0x202, &(0x7f0000000200)) r2 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@local, @multicast2, @private}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200000002) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004106) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x2, 0x7fffffffffffffff, 0x7f}) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000380)=0x7fff, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xc63b9e35) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0d1) 04:33:29 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 04:33:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:33:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000180)="fe", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) [ 2353.987590][T29871] blktrace: Concurrent blktraces are not allowed on sg0 04:33:30 executing program 3: r0 = inotify_init1(0x0) fsetxattr$security_capability(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) 04:33:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:33:30 executing program 3: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 2354.822495][ T27] audit: type=1804 audit(1676867610.936:1532): pid=29886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1084/file0/bus" dev="ramfs" ino=888714 res=1 errno=0 04:33:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 2354.941464][ T27] audit: type=1804 audit(1676867610.956:1533): pid=29886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1084/file0/bus" dev="ramfs" ino=888714 res=1 errno=0 04:33:31 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) [ 2355.100150][ T27] audit: type=1804 audit(1676867611.126:1534): pid=29888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1084/file0/bus" dev="ramfs" ino=888714 res=1 errno=0 04:33:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000180)="fe", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 04:33:36 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) 04:33:36 executing program 3: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:33:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x500, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:33:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) 04:33:36 executing program 5: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:33:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 2360.724109][ T27] audit: type=1804 audit(1676867616.836:1535): pid=29920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1131/file0/bus" dev="ramfs" ino=889528 res=1 errno=0 [ 2360.895676][ T27] audit: type=1804 audit(1676867616.886:1536): pid=29921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1085/file0/bus" dev="ramfs" ino=891861 res=1 errno=0 04:33:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 2361.092803][ T27] audit: type=1804 audit(1676867616.896:1537): pid=29921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1085/file0/bus" dev="ramfs" ino=891861 res=1 errno=0 [ 2361.180343][ T27] audit: type=1804 audit(1676867616.906:1538): pid=29920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1131/file0/bus" dev="ramfs" ino=889528 res=1 errno=0 [ 2361.266307][ T27] audit: type=1804 audit(1676867616.986:1539): pid=29924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1131/file0/bus" dev="ramfs" ino=889528 res=1 errno=0 [ 2361.341595][ T27] audit: type=1804 audit(1676867617.086:1540): pid=29925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1085/file0/bus" dev="ramfs" ino=891861 res=1 errno=0 04:33:37 executing program 5: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:33:37 executing program 3: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:33:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 2361.764525][ T27] audit: type=1804 audit(1676867617.876:1541): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1086/file0/bus" dev="ramfs" ino=889569 res=1 errno=0 [ 2361.910332][ T27] audit: type=1804 audit(1676867617.876:1542): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1086/file0/bus" dev="ramfs" ino=889569 res=1 errno=0 04:33:38 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f00000002c0), &(0x7f00000000c0)=""/157}, 0x20) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r6, @ANYRESDEC, @ANYRES8=r5, @ANYRESDEC]) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) [ 2362.068133][ T27] audit: type=1804 audit(1676867617.906:1543): pid=29941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1132/file0/bus" dev="ramfs" ino=891950 res=1 errno=0 [ 2362.239802][ T27] audit: type=1804 audit(1676867617.916:1544): pid=29941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1132/file0/bus" dev="ramfs" ino=891950 res=1 errno=0 04:33:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) 04:33:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) 04:33:45 executing program 5: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:33:45 executing program 3: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) ptrace$setregs(0xf, r3, 0x8, &(0x7f0000000340)="c2e5a9b89d0c9b2fb2442d0d09e605699f020ec0a0b96b67c68fec2f221103c12512c13ea2c423ff2b487bd70dc33fbd12397b93a6b9daaede516623d6d6aa0c3f4d918596f22748f887273c44481ba9ad48ca0cf4afc9734a59bfba3a932a88c1448b7399577ebf6888239fe6c012699e2819413a3870bbad2d4329b07b60a8e5ad383dcd9a4d124cbde7a694469aff9b13538625ff570d4eda2e22fad8238322e97952b5d9eb688e5b19d5e42089d44c44de0681423de2ae14015e9d2f033ebf7a18e6a4c3f8bcf58f595d042f316bacc120fc137a2a416939949b43443568") accept4$unix(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$unix(r2, &(0x7f00000bd000), 0xc5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x9200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000140)='./bus\x00', 0x0) 04:33:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) 04:33:45 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f00000002c0), &(0x7f00000000c0)=""/157}, 0x20) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r6, @ANYRESDEC, @ANYRES8=r5, @ANYRESDEC]) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) 04:33:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) [ 2369.164906][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 2369.164928][ T27] audit: type=1804 audit(1676867625.276:1547): pid=29979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1133/file0/bus" dev="ramfs" ino=895658 res=1 errno=0 04:33:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 2369.379396][ T27] audit: type=1804 audit(1676867625.276:1548): pid=29979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1133/file0/bus" dev="ramfs" ino=895658 res=1 errno=0 [ 2369.533084][ T27] audit: type=1804 audit(1676867625.316:1549): pid=29980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1087/file0/bus" dev="ramfs" ino=896532 res=1 errno=0 04:33:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket(0x11, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) [ 2369.664833][ T27] audit: type=1804 audit(1676867625.316:1550): pid=29980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1087/file0/bus" dev="ramfs" ino=896532 res=1 errno=0 [ 2369.821550][ T27] audit: type=1804 audit(1676867625.406:1551): pid=29983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/newroot/1133/file0/bus" dev="ramfs" ino=895658 res=1 errno=0 04:33:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f00000002c0), &(0x7f00000000c0)=""/157}, 0x20) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r6, @ANYRESDEC, @ANYRES8=r5, @ANYRESDEC]) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) 04:33:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) sendfile(r3, r3, 0x0, 0xffffffff009) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000f00)=""/9, 0x9}, {0x0}, {0x0}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x4, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x181000, 0x42) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000044) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) 04:33:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xff61}, 0x28) [ 2370.016277][ T27] audit: type=1804 audit(1676867625.466:1552): pid=29984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/1087/file0/bus" dev="ramfs" ino=896532 res=1 errno=0 04:33:46 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) 04:33:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 04:33:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 2370.433246][T30008] hub 5-0:1.0: USB hub found [ 2370.490694][T30008] hub 5-0:1.0: 1 port detected 04:33:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f00000002c0), &(0x7f00000000c0)=""/157}, 0x20) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r6, @ANYRESDEC, @ANYRES8=r5, @ANYRESDEC]) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) 04:33:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) 04:33:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) 04:33:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:33:57 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:33:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 04:33:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2a, 0x18, 0xb3, 0x10, 0x7b8, 0x4004, 0x4fe0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x5, 0xaa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002080)={0x34, &(0x7f0000001e40)={0x0, 0x0, 0x2, "9469"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:33:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 04:33:57 executing program 3: r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) 04:33:58 executing program 3: r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 2382.009176][T27422] usb 3-1: new high-speed USB device number 56 using dummy_hcd 04:33:58 executing program 3: r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 2382.299251][T27422] usb 3-1: Using ep0 maxpacket: 16 04:33:58 executing program 3: r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 2382.429505][T27422] usb 3-1: New USB device found, idVendor=07b8, idProduct=4004, bcdDevice=4f.e0 [ 2382.455762][T27422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2382.531171][T27422] usb 3-1: config 0 descriptor?? 04:33:58 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) msync(&(0x7f00004a8000/0x4000)=nil, 0x4000, 0x6) mlock(&(0x7f0000ab2000/0x3000)=nil, 0x3000) [ 2383.919219][T27422] pegasus 3-1:0.0: can't reset MAC [ 2383.924680][T27422] pegasus: probe of 3-1:0.0 failed with error -5 [ 2383.987687][T27422] usb 3-1: USB disconnect, device number 56 04:34:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) 04:34:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000002100), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x7ffff000) lseek(r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f00000000c0)={0xee, &(0x7f0000000300)="923f3325262180653965d039b67fa96a110048f7cbc81264f0948bcecf11886257f2e2e12e42806bd153e47cd6f775cd7bde58d9a6d07e874f2c1c303d341f9ac0cda2b3b24447b79d534f25c8a2612333adfc8b141b654bf66eeb0c719d169a775cebe0548deae9bdd3cdd0f07f9806245cd30245c88a6336d671024abba9a035599bb974a235fb8af0c906fb95e318c05cb30c8d0ef6c4b6a4862897d73834784ecb6a7dec310b3a73b664362740255d54dbdc2f8495ee5725c8e747d02dd680650d9183a641de25b8bfb991f8ec6f7d97bcb22759cf79db42ddf76d734415bef4b0b91f81caf944d3d8a9aceb"}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) signalfd(r5, 0x0, 0x0) 04:34:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2a, 0x18, 0xb3, 0x10, 0x7b8, 0x4004, 0x4fe0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x5, 0xaa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002080)={0x34, &(0x7f0000001e40)={0x0, 0x0, 0x2, "9469"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:34:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 04:34:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 04:34:08 executing program 3: madvise(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:34:08 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)='\r', 0x1) [ 2392.539037][T27230] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2392.799165][T27230] usb 3-1: Using ep0 maxpacket: 16 [ 2392.909088][T28774] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2392.919457][T27230] usb 3-1: New USB device found, idVendor=07b8, idProduct=4004, bcdDevice=4f.e0 [ 2392.953895][T27230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.026773][T27230] usb 3-1: config 0 descriptor?? [ 2393.199056][T28774] usb 4-1: Using ep0 maxpacket: 16 [ 2393.339217][T28774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2393.519106][T28774] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 2393.539371][T28774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.555893][T28774] usb 4-1: Product: syz [ 2393.569112][T28774] usb 4-1: Manufacturer: syz [ 2393.576901][T28774] usb 4-1: SerialNumber: syz [ 2393.644165][T28774] usb 4-1: config 0 descriptor?? [ 2393.833755][T28774] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input94 [ 2394.429244][T27230] pegasus 3-1:0.0: can't reset MAC [ 2394.434696][T27230] pegasus: probe of 3-1:0.0 failed with error -5 [ 2394.540482][T27230] usb 3-1: USB disconnect, device number 57 [ 2394.609359][T28774] rc_core: IR keymap rc-imon-pad not found [ 2394.615518][T28774] Registered IR keymap rc-empty [ 2394.653723][T28774] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2394.695936][T28774] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol 04:34:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "9c7f3666c867000000000000000000000000000000000000f5ff00001000"}) [ 2394.783946][T28774] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2394.831011][T28774] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input95 04:34:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "9c7f3666c867000000000000000000000000000000000000f5ff00001000"}) [ 2394.903532][T28774] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:119> initialized 04:34:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2a, 0x18, 0xb3, 0x10, 0x7b8, 0x4004, 0x4fe0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x5, 0xaa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002080)={0x34, &(0x7f0000001e40)={0x0, 0x0, 0x2, "9469"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:34:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "9c7f3666c867000000000000000000000000000000000000f5ff00001000"}) 04:34:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "9c7f3666c867000000000000000000000000000000000000f5ff00001000"}) [ 2395.379156][T27230] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2395.629101][T27230] usb 3-1: Using ep0 maxpacket: 16 [ 2395.749533][T27230] usb 3-1: New USB device found, idVendor=07b8, idProduct=4004, bcdDevice=4f.e0 [ 2395.762483][T27230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.794294][T27230] usb 3-1: config 0 descriptor?? [ 2397.179318][T27230] pegasus 3-1:0.0: can't reset MAC [ 2397.184671][T27230] pegasus: probe of 3-1:0.0 failed with error -5 [ 2397.214922][T27230] usb 3-1: USB disconnect, device number 58 [ 2397.227119][T28774] usb 4-1: USB disconnect, device number 119 [ 2397.233577][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:34:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{}, "3b0f0b03a867bee2", "97b0e8f3fefb141440727f8f76ba4691", "d4089c37", "99fa093c9ab0c0d8"}, 0x28) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 04:34:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 04:34:21 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)='\r', 0x1) 04:34:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181080, 0x0) syz_clone3(0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 04:34:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2a, 0x18, 0xb3, 0x10, 0x7b8, 0x4004, 0x4fe0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x5, 0xaa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002080)={0x34, &(0x7f0000001e40)={0x0, 0x0, 0x2, "9469"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000240), 0x100000001, 0x200000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 2405.409301][T27230] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2405.459202][T27514] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2405.659383][T27230] usb 3-1: Using ep0 maxpacket: 16 [ 2405.708970][T27514] usb 4-1: Using ep0 maxpacket: 16 [ 2405.780300][T27230] usb 3-1: New USB device found, idVendor=07b8, idProduct=4004, bcdDevice=4f.e0 [ 2405.811310][T27230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.829266][T27514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2405.901276][T27230] usb 3-1: config 0 descriptor?? [ 2406.029307][T27514] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 2406.060958][T27514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.137463][T27514] usb 4-1: Product: syz [ 2406.177722][T27514] usb 4-1: Manufacturer: syz [ 2406.225033][T27514] usb 4-1: SerialNumber: syz [ 2406.309552][T27514] usb 4-1: config 0 descriptor?? [ 2406.401029][T27514] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input96 [ 2407.118980][T27514] rc_core: IR keymap rc-imon-pad not found [ 2407.125197][T27514] Registered IR keymap rc-empty [ 2407.175192][T27514] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2407.260057][T27514] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2407.329083][T27230] pegasus 3-1:0.0: can't reset MAC [ 2407.335692][T27230] pegasus: probe of 3-1:0.0 failed with error -5 [ 2407.373249][T27230] usb 3-1: USB disconnect, device number 59 [ 2407.389577][T27514] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2407.448312][T27514] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input97 [ 2407.534759][T27514] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:120> initialized 04:34:24 executing program 2: prctl$PR_GET_DUMPABLE(0xd) 04:34:24 executing program 2: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:34:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x2], [0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 2408.428197][T30140] input: syz1 as /devices/virtual/input/input98 04:34:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="e9", 0x1) 04:34:24 executing program 5: futex(0x0, 0xc, 0x0, 0x0, 0x0, 0x0) 04:34:24 executing program 2: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2409.938972][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 2409.949786][T27515] usb 4-1: USB disconnect, device number 120 [ 2410.901571][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.908069][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:34:40 executing program 5: futex_waitv(&(0x7f0000004000)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000004740), 0x1) 04:34:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r1 = getuid() setfsuid(r1) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000080)) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, 0xee01}, {0x2, 0x0, r1}], {}, [{0x8, 0x2, 0xee00}, {0x8, 0x0, 0xee01}, {0x8, 0x0, r2}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x6}], {}, {0x20, 0xb746c865803eac3a}}, 0x6c, 0x2) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0xa, 0x6}) fdatasync(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) fdatasync(r0) 04:34:40 executing program 0: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:34:40 executing program 2: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:34:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000240), 0x100000001, 0x200000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 04:34:40 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)='\r', 0x1) 04:34:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) [ 2425.067358][T30183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.099089][T27515] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2425.190968][T30183] device bridge20 entered promiscuous mode [ 2425.328204][T30185] device macvtap1 entered promiscuous mode [ 2425.339230][T27515] usb 4-1: Using ep0 maxpacket: 16 04:34:41 executing program 2: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2425.398772][T30186] device macvtap2 entered promiscuous mode [ 2425.459520][T27515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 04:34:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) [ 2425.649120][T27515] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 2425.659247][T30194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.668753][T27515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.679039][T27515] usb 4-1: Product: syz [ 2425.683379][T27515] usb 4-1: Manufacturer: syz [ 2425.688039][T27515] usb 4-1: SerialNumber: syz [ 2425.698512][T27515] usb 4-1: config 0 descriptor?? [ 2425.727349][T30194] device bridge21 entered promiscuous mode [ 2425.742768][T27515] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input99 04:34:42 executing program 0: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2425.920798][T30196] device macvtap2 entered promiscuous mode 04:34:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) [ 2426.229482][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2426.270973][T27515] rc_core: IR keymap rc-imon-pad not found [ 2426.280992][T30200] device bridge22 entered promiscuous mode [ 2426.286919][T27515] Registered IR keymap rc-empty [ 2426.318979][T27515] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2426.350268][T27515] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2426.420299][T27515] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2426.423314][T30202] device macvtap3 entered promiscuous mode [ 2426.445215][T27515] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input100 [ 2426.498042][T27515] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:121> initialized 04:34:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 04:34:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) [ 2427.015049][T30213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2427.103785][T30213] device bridge23 entered promiscuous mode [ 2427.196529][T30215] device macvtap4 entered promiscuous mode [ 2427.293254][T30216] device macvtap5 entered promiscuous mode [ 2427.381023][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2427.455725][T30218] device bridge9 entered promiscuous mode [ 2427.544383][T30219] device macvtap1 entered promiscuous mode [ 2427.622696][T30220] device macvtap2 entered promiscuous mode [ 2429.321369][T27514] usb 4-1: USB disconnect, device number 121 04:34:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r1 = getuid() setfsuid(r1) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000080)) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, 0xee01}, {0x2, 0x0, r1}], {}, [{0x8, 0x2, 0xee00}, {0x8, 0x0, 0xee01}, {0x8, 0x0, r2}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x6}], {}, {0x20, 0xb746c865803eac3a}}, 0x6c, 0x2) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0xa, 0x6}) fdatasync(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) fdatasync(r0) 04:34:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000240), 0x100000001, 0x200000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 04:34:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x80045439, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "21ba1e92686ab65856f1593ccb9f5f3dd9bd85"}) 04:34:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 04:34:58 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000880)='\r', 0x1) 04:34:58 executing program 0: syz_clone(0xc5049400, &(0x7f00000001c0), 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:34:58 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) listen(r0, 0xfffffffc) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004003, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 2442.389448][T30240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2442.572902][T30240] device bridge10 entered promiscuous mode [ 2442.649235][T27421] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2442.700222][T30250] device macvtap2 entered promiscuous mode 04:34:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) [ 2442.939001][T27421] usb 4-1: Using ep0 maxpacket: 16 [ 2443.048318][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2443.079330][T27421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2443.097432][T30261] device bridge11 entered promiscuous mode [ 2443.155378][T30262] device macvtap3 entered promiscuous mode [ 2443.309381][T27421] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 2443.321193][T30261] device macvtap4 entered promiscuous mode [ 2443.331228][T27421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:34:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xbfffff7c) [ 2443.357233][T27421] usb 4-1: Product: syz [ 2443.372879][T27421] usb 4-1: Manufacturer: syz [ 2443.385470][T27421] usb 4-1: SerialNumber: syz 04:34:59 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.pending_reads\x00', 0x4040, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x7fffdf002000, 0x1, 0x11, r0, 0x0) [ 2443.409118][T27421] usb 4-1: config 0 descriptor?? [ 2443.418242][T30264] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 2443.474071][T27421] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input101 04:34:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 04:34:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', 'U'}, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2443.929381][T30270] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2443.968557][T30270] picdev_read: 70 callbacks suppressed [ 2443.968583][T30270] kvm: pic: non byte read [ 2444.129483][T27421] rc_core: IR keymap rc-imon-pad not found [ 2444.136085][T27421] Registered IR keymap rc-empty [ 2444.159336][T27421] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2444.189790][T27421] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2444.259942][T27421] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2444.283736][T27421] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input102 [ 2444.327161][T27421] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:122> initialized [ 2447.001987][T30127] usb 4-1: USB disconnect, device number 122 04:35:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r1 = getuid() setfsuid(r1) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000080)) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, 0xee01}, {0x2, 0x0, r1}], {}, [{0x8, 0x2, 0xee00}, {0x8, 0x0, 0xee01}, {0x8, 0x0, r2}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x6}], {}, {0x20, 0xb746c865803eac3a}}, 0x6c, 0x2) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0xa, 0x6}) fdatasync(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) fdatasync(r0) 04:35:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 04:35:09 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 04:35:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', 'U'}, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:35:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000240), 0x100000001, 0x200000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 04:35:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="f0ab88229309"}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b586dd", 0x6e, 0x0, 0x0, 0x0) 04:35:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2453.710125][T30296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:35:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="f0ab88229309"}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b586dd", 0x6e, 0x0, 0x0, 0x0) 04:35:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 04:35:10 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) [ 2453.955195][T30292] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2454.037876][T30292] kvm: pic: non byte read 04:35:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2454.067849][T30315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:35:10 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b0"}}, 0x119) r1 = dup(r0) readv(r1, &(0x7f0000001480)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000001400)=""/108, 0x6c}], 0x2) dup(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) dup(0xffffffffffffffff) [ 2454.477180][T30127] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz1 04:35:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r1 = getuid() setfsuid(r1) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000080)) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, 0xee01}, {0x2, 0x0, r1}], {}, [{0x8, 0x2, 0xee00}, {0x8, 0x0, 0xee01}, {0x8, 0x0, r2}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x6}], {}, {0x20, 0xb746c865803eac3a}}, 0x6c, 0x2) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0xa, 0x6}) fdatasync(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) fdatasync(r0) 04:35:19 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 04:35:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="f0ab88229309"}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b586dd", 0x6e, 0x0, 0x0, 0x0) 04:35:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', 'U'}, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:35:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 04:35:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @remote}}}}) [ 2463.001752][T30332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:35:19 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x9) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x0, "881c647625132347bbe4853c21724106542634340e069050fe7d4b2d5d0c170602"}}) 04:35:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#!'], 0xd) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x5451, 0x0) 04:35:19 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sched_rr_get_interval(0x0, &(0x7f00000007c0)) pidfd_open(0x0, 0x0) openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) syz_clone(0x800000, &(0x7f0000000840)="f9a95b4628c28d9ff093b5d585bdd88a51ca244a6c65b3b8275079d090aa654dd311ced558aa5fd2d948a3d86249b60672e15bad4492ef0d3e2acc1899b5a13d7a54091d9e2717e1dab920daeef17a9293bdc1cf0588708bb047a917112ba312a1ca68e47465e79c22d13bb7177e", 0x6e, &(0x7f0000000900), 0x0, &(0x7f0000000980)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) syz_clone(0x0, &(0x7f0000000a80)="d5cc565c685b2aebe7ac9b99a19bd5fb861d088bad152b97b36f1c5813ea826d41c8ca65c8043bb8392c87af26f9dc99d242f4054e66d301e30eb601d9ff2ad0d4e983666d73b234a96f9d4c1982c6febfdcb36c8a272fb0aabc44e8c0486eb7f0e8161e5164d569473e803b4ea3a05c52286e8a86c673dadcd441c6b24da019372e05b7ccde", 0x86, &(0x7f0000000b40), &(0x7f0000000b80), 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x8080) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000e80)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000ec0)={0x6, {0x8, 0x0, 0x6}}) pipe2$9p(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000011c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) 04:35:19 executing program 5: setrlimit(0x7, &(0x7f00000001c0)) fanotify_init(0x200, 0x0) 04:35:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="f0ab88229309"}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b586dd", 0x6e, 0x0, 0x0, 0x0) 04:35:19 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)=""/101, 0x65) [ 2463.222709][T30334] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2463.304316][T30334] kvm: pic: non byte read [ 2463.380522][T30357] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2472.341941][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.348329][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:35:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)={'syz0', 'U'}, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x800, 0x0, 0x3}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:35:30 executing program 1: openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) 04:35:30 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "932b1c", 0x1c, 0x2b, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x2}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:35:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0) 04:35:30 executing program 0: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000200)) pivot_root(0x0, 0x0) 04:35:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 04:35:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2}, 0xc) 04:35:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x0) 04:35:30 executing program 3: syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x398, &(0x7f00000005c0)={[{0x6d, 0x4e00, "412418aebeff8eca7fa0c6feffffffffffffff761001496b66da45624957439f8ba73f1e9b6e083e8ff2c1aeec35de0e76c619a974fc937c2001abd22786c0f065428f4ff71a904bb12359d53a51b9a39dc45bc6586e5bd65e23bf931a26d9d74fe4f1892543d04018027531d9"}, {0x33, 0x4e00, "c1443e3ccd13f12a75743deeeb7ee335709b5d36938ba079b8ce607adea609e7c9bf09e236792844ad45437d0885badafd1f66"}, {0xf1, 0x4e00, "64f4fbeb5355a95f9e27f3467fdbcbbf442480139b65125aaa8e8f57908afe7be0b833188f96b9d8de14c4cc8c7e7891df9d33595e18ede58e01f52a54faaa43d2f37ac5f177fdaa4c8b383afb0f11f3b3a6ab650577ac88ec2d8e7b6b6a4bb9ffa6a6b2d2c1f074c4338193edcb7d456d0573aeddb6cd89e65bff0068b0f2b2e01ef4f9dc57c2f1d1f91bfd0eccba605832f5b9f23a9322a6b5332255d4df73828daebdae7fdaddd7b2cc182447f2cbd89c205ec236e8d4401c938c48e76b478eb91b6895f9f21fe9909b59f7bf97bac5cff886a1cdd2da3b7f2ff3a2b7c7d10b35357839067f691fd44dcc8f34b50a3c"}, {0xca, 0x4e00, "a2798368163cca555db5c518c69b22ed0d81b9695168756ac933f3b2aec7809399f992ac87dd030977a161ad61ff3265319789eaaca414089d115f2cab0dbd48e5cc63be3398d01a4281189aed8929507f4c571ae551b7d834ce6134a06498ddd9659dad913dde9030d354f35122f9b9302192ecd633c583175b52444e5d511346aa2b889c0f466d88e9745619a18e95e6afa1bbf2ce33e5b5c816224062d562a5ae88868e23d5e2e06225595bc6f32dd82b0b6960b5681fec214eb6c8b0a5fcc31c02f0608a18b31272"}, {0x30, 0x4e00, "076aa692a48e9253d222d41cef8d42177ec729ae36c800fe26ad877d60bb80dc4973e2b55af03533e8d3f1075cfef9f6"}, {0xe9, 0x4e00, "816009e92ae021731a35fbcd94bd4baa1ce661cd99c35c1ff3b9423d788c90f31018aa5075f7d507eccd2c372a29880b13daaf214366bec4fff713865cddf40aeb25bef054288ebeff6887a7af78b97b7a74b097e647c8de2888bc91e831d9d30df139c0c18932e6d59309d0bf603da0b6c45999e5cc1fb4d8ecc7f4699b719671885083834e5595f88078df4d6313d5f569626aa6fa54804533f117cdf9474f34e877e327bc0283615759a240709a4fa283fea6040b2fd0a8b57681afb5dbd9d7ce9678c748221f1c508f67680132d56184fcfbb0b569349d737aaeec5f5c6d2a1cf1f76c3f3255b2"}]}) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 04:35:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0) 04:35:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xac99b80508c89e09}], {0x14}}, 0x3c}}, 0x0) 04:35:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) [ 2474.545227][T30379] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2474.614573][T30379] kvm: pic: non byte read 04:35:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 04:35:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0) 04:35:40 executing program 3: syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x398, &(0x7f00000005c0)={[{0x6d, 0x4e00, "412418aebeff8eca7fa0c6feffffffffffffff761001496b66da45624957439f8ba73f1e9b6e083e8ff2c1aeec35de0e76c619a974fc937c2001abd22786c0f065428f4ff71a904bb12359d53a51b9a39dc45bc6586e5bd65e23bf931a26d9d74fe4f1892543d04018027531d9"}, {0x33, 0x4e00, "c1443e3ccd13f12a75743deeeb7ee335709b5d36938ba079b8ce607adea609e7c9bf09e236792844ad45437d0885badafd1f66"}, {0xf1, 0x4e00, "64f4fbeb5355a95f9e27f3467fdbcbbf442480139b65125aaa8e8f57908afe7be0b833188f96b9d8de14c4cc8c7e7891df9d33595e18ede58e01f52a54faaa43d2f37ac5f177fdaa4c8b383afb0f11f3b3a6ab650577ac88ec2d8e7b6b6a4bb9ffa6a6b2d2c1f074c4338193edcb7d456d0573aeddb6cd89e65bff0068b0f2b2e01ef4f9dc57c2f1d1f91bfd0eccba605832f5b9f23a9322a6b5332255d4df73828daebdae7fdaddd7b2cc182447f2cbd89c205ec236e8d4401c938c48e76b478eb91b6895f9f21fe9909b59f7bf97bac5cff886a1cdd2da3b7f2ff3a2b7c7d10b35357839067f691fd44dcc8f34b50a3c"}, {0xca, 0x4e00, "a2798368163cca555db5c518c69b22ed0d81b9695168756ac933f3b2aec7809399f992ac87dd030977a161ad61ff3265319789eaaca414089d115f2cab0dbd48e5cc63be3398d01a4281189aed8929507f4c571ae551b7d834ce6134a06498ddd9659dad913dde9030d354f35122f9b9302192ecd633c583175b52444e5d511346aa2b889c0f466d88e9745619a18e95e6afa1bbf2ce33e5b5c816224062d562a5ae88868e23d5e2e06225595bc6f32dd82b0b6960b5681fec214eb6c8b0a5fcc31c02f0608a18b31272"}, {0x30, 0x4e00, "076aa692a48e9253d222d41cef8d42177ec729ae36c800fe26ad877d60bb80dc4973e2b55af03533e8d3f1075cfef9f6"}, {0xe9, 0x4e00, "816009e92ae021731a35fbcd94bd4baa1ce661cd99c35c1ff3b9423d788c90f31018aa5075f7d507eccd2c372a29880b13daaf214366bec4fff713865cddf40aeb25bef054288ebeff6887a7af78b97b7a74b097e647c8de2888bc91e831d9d30df139c0c18932e6d59309d0bf603da0b6c45999e5cc1fb4d8ecc7f4699b719671885083834e5595f88078df4d6313d5f569626aa6fa54804533f117cdf9474f34e877e327bc0283615759a240709a4fa283fea6040b2fd0a8b57681afb5dbd9d7ce9678c748221f1c508f67680132d56184fcfbb0b569349d737aaeec5f5c6d2a1cf1f76c3f3255b2"}]}) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 04:35:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x7}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) 04:35:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff1000}]}) pivot_root(0x0, 0x0) 04:35:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 04:35:40 executing program 2: r0 = socket(0x21, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_clone3(&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/164, 0xa4, &(0x7f0000000400)=""/70, &(0x7f0000000080)=[0x0], 0x1}, 0x58) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x20, 0x2d}, 0x9c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) listen(r3, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:35:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0) 04:35:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="850000000700000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d836395560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a9311958f3be84781f7ecafa0a3bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f437853d9c04b195fa52848dd1755796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f766c3cb8cd6a4a46895dc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5ae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec6bde50940e9bf33f91a6c5056af135b53e195b0dee15f0d8ab12abc04ecff939edfeb6535540e5c027ff4df6589cb4717107bf564a2350564f4bdbcf4e048f2b34570d5ef2bb8e9274d5d40af19b0afe0c774b562378fc3dbf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc496037c1de1b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a288090000008000000000cb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b7eb835d38f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b728996b227c6b313e2852c52f9975cd124771bef02f431afe50e0000df13ec1a2ba3e4bc7285bae2b98955a30dcc99ae25a56898b95424c20dfe77c3d002a37b73830d7deb2aea80973af5a7ba0347a4a7b9ff7c1d17ce2dec87fe9922aa04cf47d5806c239700000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 04:35:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xc0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1dc, 0xffffffff, 0xffffffff, 0x1dc, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xdc, 0x11c, 0x0, {}, [@common=@set={{0x40}}, @common=@addrtype={{0x2c}}]}, @common=@inet=@TCPOPTSTRIP={0x2b}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2cc) 04:35:41 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 04:35:41 executing program 0: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4001, 0x0, 0x0, 0x0) 04:35:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000001) syz_open_procfs(r0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) 04:35:41 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'macsec0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev, 'bridge0\x00'}}) 04:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}]}]}, 0x28}}, 0x0) 04:35:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x1) creat(&(0x7f0000000400)='./file0\x00', 0x0) dup3(r0, r1, 0x0) 04:35:49 executing program 2: r0 = socket(0x21, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_clone3(&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/164, 0xa4, &(0x7f0000000400)=""/70, &(0x7f0000000080)=[0x0], 0x1}, 0x58) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x20, 0x2d}, 0x9c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) listen(r3, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:35:49 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'macsec0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev, 'bridge0\x00'}}) 04:35:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x42) ioctl$USBDEVFS_RELEASE_PORT(r0, 0xc0105502, 0x0) 04:35:49 executing program 3: syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x398, &(0x7f00000005c0)={[{0x6d, 0x4e00, "412418aebeff8eca7fa0c6feffffffffffffff761001496b66da45624957439f8ba73f1e9b6e083e8ff2c1aeec35de0e76c619a974fc937c2001abd22786c0f065428f4ff71a904bb12359d53a51b9a39dc45bc6586e5bd65e23bf931a26d9d74fe4f1892543d04018027531d9"}, {0x33, 0x4e00, "c1443e3ccd13f12a75743deeeb7ee335709b5d36938ba079b8ce607adea609e7c9bf09e236792844ad45437d0885badafd1f66"}, {0xf1, 0x4e00, "64f4fbeb5355a95f9e27f3467fdbcbbf442480139b65125aaa8e8f57908afe7be0b833188f96b9d8de14c4cc8c7e7891df9d33595e18ede58e01f52a54faaa43d2f37ac5f177fdaa4c8b383afb0f11f3b3a6ab650577ac88ec2d8e7b6b6a4bb9ffa6a6b2d2c1f074c4338193edcb7d456d0573aeddb6cd89e65bff0068b0f2b2e01ef4f9dc57c2f1d1f91bfd0eccba605832f5b9f23a9322a6b5332255d4df73828daebdae7fdaddd7b2cc182447f2cbd89c205ec236e8d4401c938c48e76b478eb91b6895f9f21fe9909b59f7bf97bac5cff886a1cdd2da3b7f2ff3a2b7c7d10b35357839067f691fd44dcc8f34b50a3c"}, {0xca, 0x4e00, "a2798368163cca555db5c518c69b22ed0d81b9695168756ac933f3b2aec7809399f992ac87dd030977a161ad61ff3265319789eaaca414089d115f2cab0dbd48e5cc63be3398d01a4281189aed8929507f4c571ae551b7d834ce6134a06498ddd9659dad913dde9030d354f35122f9b9302192ecd633c583175b52444e5d511346aa2b889c0f466d88e9745619a18e95e6afa1bbf2ce33e5b5c816224062d562a5ae88868e23d5e2e06225595bc6f32dd82b0b6960b5681fec214eb6c8b0a5fcc31c02f0608a18b31272"}, {0x30, 0x4e00, "076aa692a48e9253d222d41cef8d42177ec729ae36c800fe26ad877d60bb80dc4973e2b55af03533e8d3f1075cfef9f6"}, {0xe9, 0x4e00, "816009e92ae021731a35fbcd94bd4baa1ce661cd99c35c1ff3b9423d788c90f31018aa5075f7d507eccd2c372a29880b13daaf214366bec4fff713865cddf40aeb25bef054288ebeff6887a7af78b97b7a74b097e647c8de2888bc91e831d9d30df139c0c18932e6d59309d0bf603da0b6c45999e5cc1fb4d8ecc7f4699b719671885083834e5595f88078df4d6313d5f569626aa6fa54804533f117cdf9474f34e877e327bc0283615759a240709a4fa283fea6040b2fd0a8b57681afb5dbd9d7ce9678c748221f1c508f67680132d56184fcfbb0b569349d737aaeec5f5c6d2a1cf1f76c3f3255b2"}]}) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 04:35:49 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'macsec0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev, 'bridge0\x00'}}) 04:35:49 executing program 5: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5415, 0x0) 04:35:49 executing program 4: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="d8ddef85a31fe5a761a3e1a8ae19cd236d49355a290723f50e5b4257b6e39c6fe7ff83a1933dafb938215316b04d68f21b26a043104c6a382866676086e1557e87338843be37525e9cf02557793845375d0933aaaa303770d60d05271830cbb6ec4f3fe53a904023e328d13e791ebfd496e9d06ecde011f6c63446eae8ef7c2c9287ec5a4bdfd0b2206d03dfb3ab", 0x8e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="4fd8061cd13da3b3413b3ea00d59e4e90534446cc541a9723cd84a294180c8dc34625491c8084da829a1055b05d9adf304ee9f26a9af9e11e78d30842ad8bc69656faecdee6cec4d8df9924b287903e925d1912edda1bc92d5769c324c9b7e40ff47e17791ec59012cd598ec53fc") syz_clone(0x48102100, &(0x7f0000000200)="5ac9cee50bbf679e2da285f279321e2e4f", 0x11, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="63b39b1efd7278787fabb7927f4e2304fe74048fb63c2f6b4003e7d40d4da18d1145346f0318a2fe5a19db43cade26a78cc05b56c143f8b0a4d7b67e170b591cb9439533339bf182617dc3ff3f173ec7b6ac682c39b033a120a8f24aa3cb14de4a752bc6a9a2f6503aaa9898c9accebef4421309ba16d27f38f211c3a81bc8bd8f8c96cfb2cba94fd5adb5e64063097b404fdda384946a20b74c8a2356a1") r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000c40)='ns/net\x00') 04:35:49 executing program 5: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5415, 0x0) 04:35:49 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'macsec0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev, 'bridge0\x00'}}) 04:35:49 executing program 5: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5415, 0x0) 04:35:57 executing program 1: io_setup(0x2, &(0x7f00000002c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close(r1) 04:35:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x38}}, 0x0) 04:35:57 executing program 5: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5415, 0x0) 04:35:57 executing program 2: r0 = socket(0x21, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_clone3(&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/164, 0xa4, &(0x7f0000000400)=""/70, &(0x7f0000000080)=[0x0], 0x1}, 0x58) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x20, 0x2d}, 0x9c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) listen(r3, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:35:57 executing program 4: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="d8ddef85a31fe5a761a3e1a8ae19cd236d49355a290723f50e5b4257b6e39c6fe7ff83a1933dafb938215316b04d68f21b26a043104c6a382866676086e1557e87338843be37525e9cf02557793845375d0933aaaa303770d60d05271830cbb6ec4f3fe53a904023e328d13e791ebfd496e9d06ecde011f6c63446eae8ef7c2c9287ec5a4bdfd0b2206d03dfb3ab", 0x8e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="4fd8061cd13da3b3413b3ea00d59e4e90534446cc541a9723cd84a294180c8dc34625491c8084da829a1055b05d9adf304ee9f26a9af9e11e78d30842ad8bc69656faecdee6cec4d8df9924b287903e925d1912edda1bc92d5769c324c9b7e40ff47e17791ec59012cd598ec53fc") syz_clone(0x48102100, &(0x7f0000000200)="5ac9cee50bbf679e2da285f279321e2e4f", 0x11, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="63b39b1efd7278787fabb7927f4e2304fe74048fb63c2f6b4003e7d40d4da18d1145346f0318a2fe5a19db43cade26a78cc05b56c143f8b0a4d7b67e170b591cb9439533339bf182617dc3ff3f173ec7b6ac682c39b033a120a8f24aa3cb14de4a752bc6a9a2f6503aaa9898c9accebef4421309ba16d27f38f211c3a81bc8bd8f8c96cfb2cba94fd5adb5e64063097b404fdda384946a20b74c8a2356a1") r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000c40)='ns/net\x00') 04:35:57 executing program 3: syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x398, &(0x7f00000005c0)={[{0x6d, 0x4e00, "412418aebeff8eca7fa0c6feffffffffffffff761001496b66da45624957439f8ba73f1e9b6e083e8ff2c1aeec35de0e76c619a974fc937c2001abd22786c0f065428f4ff71a904bb12359d53a51b9a39dc45bc6586e5bd65e23bf931a26d9d74fe4f1892543d04018027531d9"}, {0x33, 0x4e00, "c1443e3ccd13f12a75743deeeb7ee335709b5d36938ba079b8ce607adea609e7c9bf09e236792844ad45437d0885badafd1f66"}, {0xf1, 0x4e00, "64f4fbeb5355a95f9e27f3467fdbcbbf442480139b65125aaa8e8f57908afe7be0b833188f96b9d8de14c4cc8c7e7891df9d33595e18ede58e01f52a54faaa43d2f37ac5f177fdaa4c8b383afb0f11f3b3a6ab650577ac88ec2d8e7b6b6a4bb9ffa6a6b2d2c1f074c4338193edcb7d456d0573aeddb6cd89e65bff0068b0f2b2e01ef4f9dc57c2f1d1f91bfd0eccba605832f5b9f23a9322a6b5332255d4df73828daebdae7fdaddd7b2cc182447f2cbd89c205ec236e8d4401c938c48e76b478eb91b6895f9f21fe9909b59f7bf97bac5cff886a1cdd2da3b7f2ff3a2b7c7d10b35357839067f691fd44dcc8f34b50a3c"}, {0xca, 0x4e00, "a2798368163cca555db5c518c69b22ed0d81b9695168756ac933f3b2aec7809399f992ac87dd030977a161ad61ff3265319789eaaca414089d115f2cab0dbd48e5cc63be3398d01a4281189aed8929507f4c571ae551b7d834ce6134a06498ddd9659dad913dde9030d354f35122f9b9302192ecd633c583175b52444e5d511346aa2b889c0f466d88e9745619a18e95e6afa1bbf2ce33e5b5c816224062d562a5ae88868e23d5e2e06225595bc6f32dd82b0b6960b5681fec214eb6c8b0a5fcc31c02f0608a18b31272"}, {0x30, 0x4e00, "076aa692a48e9253d222d41cef8d42177ec729ae36c800fe26ad877d60bb80dc4973e2b55af03533e8d3f1075cfef9f6"}, {0xe9, 0x4e00, "816009e92ae021731a35fbcd94bd4baa1ce661cd99c35c1ff3b9423d788c90f31018aa5075f7d507eccd2c372a29880b13daaf214366bec4fff713865cddf40aeb25bef054288ebeff6887a7af78b97b7a74b097e647c8de2888bc91e831d9d30df139c0c18932e6d59309d0bf603da0b6c45999e5cc1fb4d8ecc7f4699b719671885083834e5595f88078df4d6313d5f569626aa6fa54804533f117cdf9474f34e877e327bc0283615759a240709a4fa283fea6040b2fd0a8b57681afb5dbd9d7ce9678c748221f1c508f67680132d56184fcfbb0b569349d737aaeec5f5c6d2a1cf1f76c3f3255b2"}]}) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 04:35:57 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x3, 0x0, 0x3) 04:35:57 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000019b40320d812010085de0100020109021b0020000000000904000001785e000009058502df"], 0x0) 04:35:57 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'user:'}, 0x27, 0x0) 04:35:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) [ 2502.019245][T27422] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 2502.469038][T27422] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 32 [ 2502.488046][T27422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 223, setting to 64 04:35:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) [ 2502.659280][T27422] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 04:35:58 executing program 2: r0 = socket(0x21, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_clone3(&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/164, 0xa4, &(0x7f0000000400)=""/70, &(0x7f0000000080)=[0x0], 0x1}, 0x58) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x20, 0x2d}, 0x9c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) listen(r3, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 2502.719812][T27422] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 2502.767450][T27422] usb 6-1: Manufacturer: syz [ 2502.787583][T27422] usb 6-1: SerialNumber: syz [ 2502.818410][T27422] usb 6-1: config 0 descriptor?? [ 2502.869399][T30489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2503.104757][T27422] usb 6-1: USB disconnect, device number 87 04:36:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) 04:36:10 executing program 4: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="d8ddef85a31fe5a761a3e1a8ae19cd236d49355a290723f50e5b4257b6e39c6fe7ff83a1933dafb938215316b04d68f21b26a043104c6a382866676086e1557e87338843be37525e9cf02557793845375d0933aaaa303770d60d05271830cbb6ec4f3fe53a904023e328d13e791ebfd496e9d06ecde011f6c63446eae8ef7c2c9287ec5a4bdfd0b2206d03dfb3ab", 0x8e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="4fd8061cd13da3b3413b3ea00d59e4e90534446cc541a9723cd84a294180c8dc34625491c8084da829a1055b05d9adf304ee9f26a9af9e11e78d30842ad8bc69656faecdee6cec4d8df9924b287903e925d1912edda1bc92d5769c324c9b7e40ff47e17791ec59012cd598ec53fc") syz_clone(0x48102100, &(0x7f0000000200)="5ac9cee50bbf679e2da285f279321e2e4f", 0x11, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="63b39b1efd7278787fabb7927f4e2304fe74048fb63c2f6b4003e7d40d4da18d1145346f0318a2fe5a19db43cade26a78cc05b56c143f8b0a4d7b67e170b591cb9439533339bf182617dc3ff3f173ec7b6ac682c39b033a120a8f24aa3cb14de4a752bc6a9a2f6503aaa9898c9accebef4421309ba16d27f38f211c3a81bc8bd8f8c96cfb2cba94fd5adb5e64063097b404fdda384946a20b74c8a2356a1") r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000c40)='ns/net\x00') 04:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) 04:36:10 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000019b40320d812010085de0100020109021b0020000000000904000001785e000009058502df"], 0x0) 04:36:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x80000003}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r0) sendto$inet(r0, &(0x7f0000000080)="a0a96ece82ad3eab6ee49867e48462183dd2ee242e86661819b427dfbdfeae93230089bd5a6a67e1c602fb0a53bfca3e93ab5a558a52e6e11c3f5ebedefabe4dac253f19f2164501fac72913f4a328f81eda813f33b105728ed2f0ea9b2d469d545290071406cee1e78f742637d6e2a80a903784f380690d0481be7a973b903d7071396a461daf76b2f80db7419de0df9665d9f48123c59447a968f0958cfe6893218a565048fdf3a48310d000707c19942125f77f5fcdd777b78f909b4778553814e697b8b26da27a42f4d81112adb27a8513acd0bcf39b33f1eaa2c1f32cecefd25b55855c792c6c9a3c7991a3f5", 0xef, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x48400, 0x62) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x200, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40002}, 0x400) 04:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2514.319277][T27515] usb 6-1: new full-speed USB device number 88 using dummy_hcd 04:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) [ 2514.689391][T27515] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 32 [ 2514.715349][T27515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 223, setting to 64 [ 2514.879438][T27515] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 2514.906608][T27515] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 04:36:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) [ 2514.946165][T27515] usb 6-1: Manufacturer: syz 04:36:11 executing program 4: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="d8ddef85a31fe5a761a3e1a8ae19cd236d49355a290723f50e5b4257b6e39c6fe7ff83a1933dafb938215316b04d68f21b26a043104c6a382866676086e1557e87338843be37525e9cf02557793845375d0933aaaa303770d60d05271830cbb6ec4f3fe53a904023e328d13e791ebfd496e9d06ecde011f6c63446eae8ef7c2c9287ec5a4bdfd0b2206d03dfb3ab", 0x8e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="4fd8061cd13da3b3413b3ea00d59e4e90534446cc541a9723cd84a294180c8dc34625491c8084da829a1055b05d9adf304ee9f26a9af9e11e78d30842ad8bc69656faecdee6cec4d8df9924b287903e925d1912edda1bc92d5769c324c9b7e40ff47e17791ec59012cd598ec53fc") syz_clone(0x48102100, &(0x7f0000000200)="5ac9cee50bbf679e2da285f279321e2e4f", 0x11, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="63b39b1efd7278787fabb7927f4e2304fe74048fb63c2f6b4003e7d40d4da18d1145346f0318a2fe5a19db43cade26a78cc05b56c143f8b0a4d7b67e170b591cb9439533339bf182617dc3ff3f173ec7b6ac682c39b033a120a8f24aa3cb14de4a752bc6a9a2f6503aaa9898c9accebef4421309ba16d27f38f211c3a81bc8bd8f8c96cfb2cba94fd5adb5e64063097b404fdda384946a20b74c8a2356a1") r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000c40)='ns/net\x00') [ 2514.966625][T27515] usb 6-1: SerialNumber: syz [ 2515.004810][T27515] usb 6-1: config 0 descriptor?? 04:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2515.049328][T30518] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 04:36:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2515.448257][T27515] usb 6-1: USB disconnect, device number 88 04:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:36:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:36:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4, 0x8, 0x0, 0x0}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 04:36:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x27) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xc00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) 04:36:17 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000019b40320d812010085de0100020109021b0020000000000904000001785e000009058502df"], 0x0) 04:36:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xffffff7f) 04:36:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0xffffffffffffffff, &(0x7f00000001c0)=0x35, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, &(0x7f0000000900)="66b9ea0b00000f32f0fe01b809008ec066b819e000000f23d80f21f86635000000700f23f8dd7c500f01dfd8c8b806008ec0baf80c66b8d932758a66efbafc0cecf30fbd4a30", 0x46}], 0x1, 0x28, &(0x7f00000009c0), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x57) 04:36:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 04:36:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) [ 2521.691847][T30127] usb 6-1: new full-speed USB device number 89 using dummy_hcd 04:36:18 executing program 0: syz_emit_ethernet(0xae, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "da9ecb", 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "1b59afd4ceb8aaea"}}}}}}}, 0x0) 04:36:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 04:36:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) [ 2522.059709][T30127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 32 [ 2522.072649][T30127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 223, setting to 64 04:36:18 executing program 0: syz_emit_ethernet(0xae, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "da9ecb", 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "1b59afd4ceb8aaea"}}}}}}}, 0x0) [ 2522.209270][T30127] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 2522.225359][T30127] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 2522.283267][T30127] usb 6-1: Manufacturer: syz [ 2522.297113][T30127] usb 6-1: SerialNumber: syz [ 2522.323256][T30127] usb 6-1: config 0 descriptor?? [ 2522.349435][T30590] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2522.646475][T30580] usb 6-1: USB disconnect, device number 89 [ 2533.781900][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2533.788363][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:36:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e21, @empty}}}, 0x90) 04:36:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064756d6d7930000000000000000000000500210002"], 0x3c}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x2, 0x0) 04:36:30 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8005, &(0x7f0000000000)=0xd, 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) 04:36:30 executing program 0: syz_emit_ethernet(0xae, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "da9ecb", 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "1b59afd4ceb8aaea"}}}}}}}, 0x0) 04:36:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:36:30 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000019b40320d812010085de0100020109021b0020000000000904000001785e000009058502df"], 0x0) 04:36:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000004c0)={0x0, &(0x7f00000000c0), 0x0, r2, 0x14}) 04:36:30 executing program 0: syz_emit_ethernet(0xae, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "da9ecb", 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "1b59afd4ceb8aaea"}}}}}}}, 0x0) 04:36:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b4, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x2, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) 04:36:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) [ 2534.299200][T27230] usb 6-1: new full-speed USB device number 90 using dummy_hcd 04:36:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="000000000000001f640000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000040950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2534.576393][T30640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2534.669362][T27230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 32 [ 2534.696012][T27230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 223, setting to 64 [ 2534.859111][T27230] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 2534.884932][T27230] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 2534.941516][T27230] usb 6-1: Manufacturer: syz [ 2534.959004][T27230] usb 6-1: SerialNumber: syz [ 2535.011508][T27230] usb 6-1: config 0 descriptor?? [ 2535.049465][T30618] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2535.328230][T24480] usb 6-1: USB disconnect, device number 90 04:36:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:36:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0xc, 0x117, 0x2}}], 0xc}}], 0x2, 0x0) 04:36:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 04:36:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) [ 2544.829471][T30667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2545.020847][T30668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:36:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:36:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) [ 2547.099988][T30694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2547.826365][T30695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2548.113224][T30696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:36:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 2548.261942][T30693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2553.338650][T30715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:36:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$audion(&(0x7f0000000080), 0x80, 0x311283) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x8000, 0x40}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:36:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) [ 2554.426333][T30742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2555.302278][T30741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2555.521959][T30743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:36:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) [ 2555.703353][T30746] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:36:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/83, 0x53}], 0x1) 04:36:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:36:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:36:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/83, 0x53}], 0x1) 04:36:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/83, 0x53}], 0x1) [ 2556.246797][T30764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2556.544497][T30769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2562.474618][T30781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:37:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10}}, @l2tp={0x2, 0x0, @local, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="cf1c21bc93d3129548b0fb03074e5799483907ed64bf698a005665dea98e0e0a37289a6a6d913123755eff9aa6fce2d467ba05addb3c09f255d24a59d38faaeb321bf20a18ebe6b97d3a33ac1a8d694ef97c04", 0x53}, {&(0x7f0000000240)="5fc32dd5f180a8f58e61bbec4daf0042668295d9f6121429293a207cc59f48a41bf8d11645d85557fe8197faec6c76e5ee57ce6a779315dc8e6f8e10b4eb6ccc7f57207b4c2e08f282c1f9766fa1ebcdf9103f09bc7ab19724f349aee9fc529266bf1ed417622668fa4f89cdd716912d942e0f0d0d0cbde69c37c5203b5f", 0x7e}, {&(0x7f0000000100)="ac9ac2ae180e8b9c", 0x8}, {&(0x7f00000002c0)="ba1e09472a3dff4115", 0x9}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d000000000000000100000052000000100000000000000002000000ff03000010000000000000000100000015000000100000000000000002000000070000000d00000000000000010000000400000050000000000000000700000083176c7f00000164010100640101027f000001640101019404010000440caac00000000400000003441c26a1ac1414bb00000001ffffffff00000000e0000002000000f61000000000000000070000000000000010000000000000000100000003000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0f3fbc9aa000002ac1414bb"], 0xd8}, 0x20000840) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000026000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 04:37:00 executing program 2: io_setup(0x6, &(0x7f0000000100)=0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$pppoe(0x18, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="89", 0x1}]) 04:37:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/83, 0x53}], 0x1) 04:37:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:37:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:37:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0) 04:37:00 executing program 3: socket$kcm(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="c2", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=';', 0x1}], 0x1}, 0x0) 04:37:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 04:37:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 04:37:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 04:37:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) [ 2572.962690][T30819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:37:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 04:37:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 04:37:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:37:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:37:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 04:37:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000300)=0xf32b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)=""/2, &(0x7f00000000c0)=0x10) 04:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:37:10 executing program 2: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 04:37:10 executing program 3: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) 04:37:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 04:37:10 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "8827a8dfa7813a988b197387ceccc92a64c4e39d4abaf0dc9e1454693bab0e708de67ec171be8d787933c35e7f572dfe8b781bbf00b1098011bbd8b89fd54dc1"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$describe(0x6, r0, 0x0, 0x0) 04:37:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:37:11 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "8827a8dfa7813a988b197387ceccc92a64c4e39d4abaf0dc9e1454693bab0e708de67ec171be8d787933c35e7f572dfe8b781bbf00b1098011bbd8b89fd54dc1"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$describe(0x6, r0, 0x0, 0x0) 04:37:11 executing program 3: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) 04:37:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7004, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x8000000}], 0x400000000000181, 0x920000000000090d) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 04:37:19 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "8827a8dfa7813a988b197387ceccc92a64c4e39d4abaf0dc9e1454693bab0e708de67ec171be8d787933c35e7f572dfe8b781bbf00b1098011bbd8b89fd54dc1"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$describe(0x6, r0, 0x0, 0x0) 04:37:19 executing program 3: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) 04:37:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:19 executing program 0: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) 04:37:19 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "8827a8dfa7813a988b197387ceccc92a64c4e39d4abaf0dc9e1454693bab0e708de67ec171be8d787933c35e7f572dfe8b781bbf00b1098011bbd8b89fd54dc1"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$describe(0x6, r0, 0x0, 0x0) 04:37:19 executing program 2: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006340)}}, {{0x0, 0x0, &(0x7f00000064c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f00000002c0)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x6, 0x60c5840) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7feafca7e4d5d5fdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="799cb33c44"], 0x20000600}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6}, 0x20) preadv(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000011) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:37:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x7d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000200)=0x5, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x24040080) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x3, @loopback}}, 0x0, 0x6, 0x2d, 0x0, "000000000000000000000000000000000000014d1700000000009a000000000000000000000000010400000000000000000000000000000000000000fbe16f66fac112bf00f803bb3e5e0b088a00"}, 0xd8) bind$inet(r8, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x80, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x244, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4}, 0x48000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x4, 0x7fffffdd}, 0x14) shutdown(r8, 0x1) dup3(r2, r8, 0x80000) 04:37:20 executing program 3: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) 04:37:20 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)) 04:37:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0xe8, 0x40, 0xc52, 0x2222, 0x433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x53, 0xb9}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x32, 0x0, 0x1, [{0x0, 0x0}]}) [ 2584.838912][T30580] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2585.519359][T30580] usb 3-1: string descriptor 0 read error: -22 [ 2585.529242][T30580] usb 3-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice= 4.33 [ 2585.538347][T30580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.597062][T30580] usb 3-1: config 0 descriptor?? [ 2585.650790][T30580] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2585.679204][T30580] ftdi_sio ttyUSB0: unknown device type: 0x433 [ 2585.854230][T30580] usb 3-1: USB disconnect, device number 60 [ 2585.865249][T30580] ftdi_sio 3-1:0.0: device disconnected 04:37:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="b2dd6cb76152ad87d83307c7afdffb", 0xf}, {&(0x7f0000000100)="b15259ab56bbd2e65e4a1035", 0xc}, {&(0x7f0000001680)="110387629536af62f85963fddd794a3b88f1a13dfaf9becdfa1b76df70e8b9ee5f4a8a3d22228ee5304cd83254a96aeaf89fd0825e6ca584c6359aa270f276dffb71c381672105f8e32bad4933ba3f2b663e376e39ed5ea6bdbe860a9f9190fce291ace23f72eb43458b064fe0cca8cc7856a0c182d8979ca61bd4df52989e8f2ec12bc7c2", 0x85}], 0x3}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/189, 0xbd}], 0x2}}], 0x1, 0x52, 0x0) 04:37:26 executing program 0: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) 04:37:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) 04:37:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)='R', 0x1, 0xfe80ffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffff000}}, 0x1c) 04:37:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r8, @ANYBLOB="b9224a983ceaa132da70e431f6f4528b9447a70dbd3e4dcc6a8ceaf954f578d60ae277bee87ad2d43bc9424f357d6fe0bdbe20f11bceb5fd72cf98a6fe328186c90cc6ea1f710a4307103ae216c7bae4976e417bfd12bf66e143febca76059e4d2b9fd"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000640)=""/4096) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:37:26 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0xe8, 0x40, 0xc52, 0x2222, 0x433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x53, 0xb9}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x32, 0x0, 0x1, [{0x0, 0x0}]}) 04:37:27 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RSTATFS(r0, 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:37:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r5) fstat(r5, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/memstick_host', 0x4c0080, 0x12) getresuid(0x0, 0x0, &(0x7f0000000900)) sendfile(r2, r1, &(0x7f0000002080)=0x60, 0x870) 04:37:27 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @private, @empty}}}}}, 0x0) 04:37:27 executing program 4: r0 = fsopen(&(0x7f0000000340)='bpf\x00', 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) [ 2591.209139][T24480] usb 3-1: new high-speed USB device number 61 using dummy_hcd 04:37:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_pts(0xffffffffffffffff, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012ac0)={0x2020}, 0x2020) io_uring_enter(r7, 0x12cd, 0x0, 0xb53aa9808ce951a7, &(0x7f0000000080)={[0x80000000, 0x3a]}, 0x8) io_uring_enter(r0, 0x4364, 0x0, 0x0, 0x0, 0x300) 04:37:27 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) [ 2591.455538][ T27] audit: type=1326 audit(1676867847.566:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31549 code=0x0 [ 2591.919006][T24480] usb 3-1: string descriptor 0 read error: -22 [ 2591.925627][T24480] usb 3-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice= 4.33 [ 2591.940701][T24480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.955404][T24480] usb 3-1: config 0 descriptor?? 04:37:28 executing program 0: r0 = syz_clone(0x20000000, &(0x7f00000001c0)='(', 0x1, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100010) getpid() r1 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xff, 0x94e, 0x6, 0xfffff64b, 0xc, 0x5, 0x2}, 0x9c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0xc002, 0x0) signalfd4(r2, &(0x7f0000001300), 0x8, 0x1800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800f323ab7974000004000000100001800c00000000000000000000005928974f0d4c12b7f6f95c165765062fecc7ca7fdd601379ed26a691a51d748aab4cf0ff620478a0b824d2e769b527435ff591fb61adf8ac211b95d3cf461448637fd99c9921a6a12fce61eb6f3d39d0ccb097cd164354999feaf604ec8466840d3d58c1026b652a01fe975a085d7703553bc1c4947b9d359262acdf9b94693b01f7490f524ae03daf22f9cdfe4e46e00954ffa27b4784238973fe579a3e7564fe347072ccdb53ca4a845dc9f027d6687fa7c6df3edd414b00000000000000040000000000000000"], 0x28}}, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x60, 0x4002) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xad, 0x280000000000000, 0x1, 0xfffffffffffffff8, 0x1, 0x401, 0xe940, 0x4, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x1, 0x63}}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000014c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400c095}, 0x4000010) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2}, &(0x7f0000000180)=0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000001440)={0x1, 0x7, 0x9, 0x1, 0x5}) ptrace(0x8, r0) [ 2592.000994][T24480] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2592.024964][T24480] ftdi_sio ttyUSB0: unknown device type: 0x433 [ 2592.298731][T30127] usb 3-1: USB disconnect, device number 61 [ 2592.319553][T30127] ftdi_sio 3-1:0.0: device disconnected [ 2592.851954][T30942] syz-executor.5 (30942): drop_caches: 2 [ 2595.222046][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.228442][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:37:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_pts(0xffffffffffffffff, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012ac0)={0x2020}, 0x2020) io_uring_enter(r7, 0x12cd, 0x0, 0xb53aa9808ce951a7, &(0x7f0000000080)={[0x80000000, 0x3a]}, 0x8) io_uring_enter(r0, 0x4364, 0x0, 0x0, 0x0, 0x300) 04:37:36 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0xe8, 0x40, 0xc52, 0x2222, 0x433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x53, 0xb9}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x32, 0x0, 0x1, [{0x0, 0x0}]}) 04:37:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 04:37:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r5) fstat(r5, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/memstick_host', 0x4c0080, 0x12) getresuid(0x0, 0x0, &(0x7f0000000900)) sendfile(r2, r1, &(0x7f0000002080)=0x60, 0x870) 04:37:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x405c5503, &(0x7f00000000c0)) 04:37:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x200000000004e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='y', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}}], 0x1, 0x8001) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x1000}], 0x1}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/228, 0xe4, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 04:37:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 04:37:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x405c5503, &(0x7f00000000c0)) 04:37:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 04:37:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x405c5503, &(0x7f00000000c0)) [ 2600.439857][T24480] usb 3-1: new high-speed USB device number 62 using dummy_hcd 04:37:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 04:37:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x405c5503, &(0x7f00000000c0)) [ 2601.120243][T24480] usb 3-1: string descriptor 0 read error: -22 [ 2601.127983][T24480] usb 3-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice= 4.33 [ 2601.175991][T24480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2601.226313][T24480] usb 3-1: config 0 descriptor?? [ 2601.300253][T24480] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2601.308298][T24480] ftdi_sio ttyUSB0: unknown device type: 0x433 [ 2601.592137][T24480] usb 3-1: USB disconnect, device number 62 [ 2601.602644][T24480] ftdi_sio 3-1:0.0: device disconnected [ 2602.102810][T30983] syz-executor.5 (30983): drop_caches: 2 04:37:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_pts(0xffffffffffffffff, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012ac0)={0x2020}, 0x2020) io_uring_enter(r7, 0x12cd, 0x0, 0xb53aa9808ce951a7, &(0x7f0000000080)={[0x80000000, 0x3a]}, 0x8) io_uring_enter(r0, 0x4364, 0x0, 0x0, 0x0, 0x300) 04:37:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) 04:37:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:37:38 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x17, 0x1a, 0xe8, 0x40, 0xc52, 0x2222, 0x433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x53, 0xb9}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x32, 0x0, 0x1, [{0x0, 0x0}]}) 04:37:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r5) fstat(r5, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/memstick_host', 0x4c0080, 0x12) getresuid(0x0, 0x0, &(0x7f0000000900)) sendfile(r2, r1, &(0x7f0000002080)=0x60, 0x870) [ 2603.179088][T24480] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2603.839950][T31004] syz-executor.5 (31004): drop_caches: 2 [ 2603.879278][T24480] usb 3-1: string descriptor 0 read error: -22 [ 2603.886956][T24480] usb 3-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice= 4.33 [ 2603.942646][T24480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2604.002636][T24480] usb 3-1: config 0 descriptor?? [ 2604.064305][T31004] syz-executor.5 (31004): drop_caches: 2 [ 2604.074886][T24480] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2604.146441][T24480] ftdi_sio ttyUSB0: unknown device type: 0x433 [ 2604.377303][T28774] usb 3-1: USB disconnect, device number 63 [ 2604.391606][T28774] ftdi_sio 3-1:0.0: device disconnected 04:37:46 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:37:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x8}}) 04:37:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r5) fstat(r5, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/memstick_host', 0x4c0080, 0x12) getresuid(0x0, 0x0, &(0x7f0000000900)) sendfile(r2, r1, &(0x7f0000002080)=0x60, 0x870) 04:37:46 executing program 2: r0 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r0, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe}) 04:37:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_pts(0xffffffffffffffff, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012ac0)={0x2020}, 0x2020) io_uring_enter(r7, 0x12cd, 0x0, 0xb53aa9808ce951a7, &(0x7f0000000080)={[0x80000000, 0x3a]}, 0x8) io_uring_enter(r0, 0x4364, 0x0, 0x0, 0x0, 0x300) 04:37:46 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:37:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0xfffffd87) 04:37:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2376, 0x81}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/131, &(0x7f00000000c0), &(0x7f00000000c0), 0x81, r3}, 0x38) [ 2610.694913][T31021] syz-executor.5 (31021): drop_caches: 2 [ 2610.810797][T31021] syz-executor.5 (31021): drop_caches: 2 04:37:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x2d4, 0x1000000, 0x294, 0x0, 0x294, 0x3e0, 0x378, 0x378, 0x3e0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x2b4, 0x2d4, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x0, 0xc2}}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "796268880ccc1ead08db713078a9af4f9b88574f7f1bf77d65420c28387d342331a24364f67cdd5531e34b768a6af25a06020a619a8153fb71779c857f8a000f42a2770770960471510115cbbdcf01572fb35d1e47674b41b6c4a3dfe224559d8763d5f9bc9fbae3ee50f987a1ab15581079624c1d69074c91660b783b95127a"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x504) 04:37:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}], {0x14, 0x10}}, 0x90}}, 0x0) 04:37:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}], {0x14, 0x10}}, 0x90}}, 0x0) 04:37:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}], {0x14, 0x10}}, 0x90}}, 0x0) 04:37:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:37:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{}, {0x20, 0x0, 0x0, 0x1abc8e4c}, {0x6}]}) 04:37:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}], {0x14, 0x10}}, 0x90}}, 0x0) 04:37:55 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:37:55 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000001080), 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x1, "10f919b301d1ab5c4b8793ed3b8c7c4a00"}) 04:37:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 04:37:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc9, 0x73, 0x26, 0x40, 0xb05, 0x1786, 0xd9a4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x35, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:37:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100000000000000, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x1, [], 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00']}, 0x51) 04:37:56 executing program 4: openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0xfffffc59) 04:37:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8724) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0xac, 0x25, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x28}]}]}]}, 0xc4}}, 0x0) 04:37:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2620.190232][T31067] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 04:37:56 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x300, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xfffffffffffff000, 0x0) [ 2620.398947][T27514] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2620.759215][T27514] usb 6-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=d9.a4 [ 2620.798313][T27514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.870964][T27514] usb 6-1: config 0 descriptor?? [ 2620.942013][T27514] r8712u: register rtl8712_netdev_ops to netdev_ops [ 2620.960034][T27514] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 2621.369035][T27514] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 2621.377883][T27514] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 2621.423435][T27514] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 2621.589593][T28774] usb 6-1: USB disconnect, device number 91 04:38:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:38:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8724) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0xac, 0x25, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x28}]}]}]}, 0xc4}}, 0x0) 04:38:06 executing program 3: syz_io_uring_setup(0x460e, &(0x7f0000000200), &(0x7f00007b8000/0x4000)=nil, &(0x7f0000467000/0xf000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e45, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x34e2, &(0x7f0000000400), &(0x7f0000429000/0x6000)=nil, &(0x7f0000503000/0x4000)=nil, &(0x7f0000000480), 0x0) syz_io_uring_setup(0x983, &(0x7f00000004c0), &(0x7f0000b47000/0x1000)=nil, &(0x7f0000e0f000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0xded, &(0x7f00000000c0), &(0x7f0000ecb000/0x4000)=nil, &(0x7f00009ac000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4dbe, &(0x7f0000000740), &(0x7f0000944000/0x4000)=nil, &(0x7f0000b94000/0x3000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_setup(0x6be4, &(0x7f00000005c0), &(0x7f0000e1f000/0x4000)=nil, &(0x7f0000ab3000/0x1000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) 04:38:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:06 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$damon_init_regions(r2, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', r2, 0x0, 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x6c060000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 04:38:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc9, 0x73, 0x26, 0x40, 0xb05, 0x1786, 0xd9a4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x35, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2630.866087][T31094] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 04:38:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8724) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0xac, 0x25, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x28}]}]}]}, 0xc4}}, 0x0) 04:38:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8724) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0xac, 0x25, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x28}]}]}]}, 0xc4}}, 0x0) [ 2631.079826][T31103] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2631.118901][T27515] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2631.193703][T31107] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 04:38:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2631.479141][T27515] usb 6-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=d9.a4 [ 2631.507884][T27515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2631.555770][T27515] usb 6-1: config 0 descriptor?? [ 2631.615162][T27515] r8712u: register rtl8712_netdev_ops to netdev_ops [ 2631.627654][T27515] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 2632.049263][T27515] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 2632.086466][T27515] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 2632.162489][T27515] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 2632.296204][T27515] usb 6-1: USB disconnect, device number 92 04:38:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc9, 0x73, 0x26, 0x40, 0xb05, 0x1786, 0xd9a4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x35, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2633.479122][T27515] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2633.849394][T27515] usb 6-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=d9.a4 [ 2633.882554][T27515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.935012][T27515] usb 6-1: config 0 descriptor?? [ 2633.991735][T27515] r8712u: register rtl8712_netdev_ops to netdev_ops [ 2634.011313][T27515] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 2634.419053][T27515] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 2634.428085][T27515] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 2634.454274][T27515] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 2634.682541][T27515] usb 6-1: USB disconnect, device number 93 04:38:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc9, 0x73, 0x26, 0x40, 0xb05, 0x1786, 0xd9a4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x35, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:38:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@empty}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @generic={0x0, 0x10, "804a60c2b3aab07310d400000000"}, @cipso={0x86, 0x33, 0x0, [{0x0, 0x12, "07000000001f0003969db807bcc3b9b0"}, {0x0, 0x3, 'y'}, {0x0, 0x12, "e1273f68ffa8f0c0695e0f970e80cca2"}, {0x0, 0x6, "f3f8d9f5"}]}]}}}}}}}, 0x0) [ 2647.328900][T27515] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2647.699530][T27515] usb 6-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=d9.a4 [ 2647.726375][T27515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.810035][T27515] usb 6-1: config 0 descriptor?? [ 2647.895809][T27515] r8712u: register rtl8712_netdev_ops to netdev_ops [ 2647.912852][T27515] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 2648.329016][T27515] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 2648.339219][T27515] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 2648.403677][T27515] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" 04:38:24 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0)="b2", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000dc0)=ANY=[], 0x69c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7b, &(0x7f0000000180), 0x8) 04:38:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2648.659808][T27515] usb 6-1: USB disconnect, device number 94 04:38:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 04:38:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x6043}], 0x1, 0x0, 0x0, 0x0) 04:38:25 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f00000000c0)) 04:38:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000040)="fdffffff", 0x4) 04:38:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000040)="fdffffff", 0x4) 04:38:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000040)="fdffffff", 0x4) 04:38:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000040)="fdffffff", 0x4) [ 2656.661545][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2656.667940][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 04:38:35 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f00000000c0)) 04:38:35 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000000140)="2e00000038000523d25a80648c63940d0300fc00053582b237153e370933018000f01700d1bd0000000000000000", 0x2e}], 0x1}, 0x0) 04:38:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000340)={0x0}}, 0x0) 04:38:35 executing program 2: io_setup(0xae7, &(0x7f0000000040)) io_setup(0x10000, &(0x7f0000000240)) io_setup(0x1, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000100)) io_setup(0x7, &(0x7f0000000140)) io_setup(0x4, &(0x7f0000000340)) 04:38:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 04:38:35 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f00000000c0)) 04:38:35 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f00000000c0)) 04:38:35 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}}, 0x0) [ 2659.979682][T31296] ------------[ cut here ]------------ [ 2660.059242][T31296] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 2660.083773][T31296] WARNING: CPU: 0 PID: 31296 at net/mac80211/main.c:287 ieee80211_link_info_change_notify+0x1fd/0x270 04:38:36 executing program 2: io_setup(0xae7, &(0x7f0000000040)) io_setup(0x10000, &(0x7f0000000240)) io_setup(0x1, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000100)) io_setup(0x7, &(0x7f0000000140)) io_setup(0x4, &(0x7f0000000340)) [ 2660.193796][T31296] Modules linked in: [ 2660.228942][T31296] CPU: 0 PID: 31296 Comm: syz-executor.3 Not tainted 6.2.0-syzkaller #0 [ 2660.294797][T31296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2660.336621][T31296] RIP: 0010:ieee80211_link_info_change_notify+0x1fd/0x270 [ 2660.360372][T31296] Code: 8b 9d 08 09 00 00 48 85 db 74 32 e8 1d 40 3e f8 48 89 dd e8 15 40 3e f8 44 89 f2 48 89 ee 48 c7 c7 20 3e 7c 8b e8 1e 0c 81 00 <0f> 0b e9 76 ff ff ff e8 f7 3f 3e f8 0f 0b e9 43 fe ff ff e8 eb 3f [ 2660.458027][T31296] RSP: 0018:ffffc900033e7460 EFLAGS: 00010282 [ 2660.481816][T31296] RAX: 0000000000000000 RBX: ffff888020a4c000 RCX: 0000000000000000 [ 2660.491654][T31296] RDX: 0000000000040000 RSI: ffffffff816622fc RDI: fffff5200067ce7e [ 2660.501200][T31296] RBP: ffff888020a4c000 R08: 0000000000000005 R09: 0000000000000000 [ 2660.509789][T31296] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000 [ 2660.518093][T31296] R13: ffff888020a4e248 R14: 0000000000000000 R15: ffff8880758586c0 [ 2660.526543][T31296] FS: 0000000000000000(0000) GS:ffff8880b9800000(0063) knlGS:00000000f7f2cb40 [ 2660.535901][T31296] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2660.542857][T31296] CR2: 0000000032036000 CR3: 0000000026ad3000 CR4: 00000000003506f0 [ 2660.551212][T31296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2660.559518][T31296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2660.567745][T31296] Call Trace: [ 2660.571328][T31296] [ 2660.574584][T31296] ieee80211_set_mcast_rate+0x42/0x50 [ 2660.580760][T31296] ? ieee80211_copy_mbssid_beacon+0x280/0x280 [ 2660.590627][T31296] nl80211_set_mcast_rate+0x361/0x6d0 [ 2660.596435][T31296] ? nl80211_tdls_cancel_channel_switch+0x660/0x660 [ 2660.603481][T31296] ? nl80211_pre_doit+0x120/0xab0 [ 2660.625539][T31296] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 2660.644360][T31296] ? genl_start+0x660/0x660 [ 2660.655728][T31296] ? apparmor_capable+0x1dc/0x460 [ 2660.673856][T31296] ? ns_capable+0xdd/0x100 [ 2660.682184][T31296] genl_rcv_msg+0x4ff/0x7e0 [ 2660.699682][T31296] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 2660.726997][T31296] ? __dev_queue_xmit+0xb54/0x3ba0 [ 2660.743165][T31296] ? validate_beacon_tx_rate+0x790/0x790 [ 2660.792317][T31296] ? nl80211_tdls_cancel_channel_switch+0x660/0x660 [ 2660.820979][T31296] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0 [ 2660.829072][T31296] netlink_rcv_skb+0x165/0x440 [ 2660.849746][T31296] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 2660.882877][T31296] ? netlink_ack+0x1370/0x1370 [ 2660.887905][T31296] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 2660.933916][T31296] ? netlink_deliver_tap+0x1b1/0xc50 [ 2660.981190][T31296] genl_rcv+0x28/0x40 [ 2661.046569][T31296] netlink_unicast+0x547/0x7f0 [ 2661.079491][T31296] ? netlink_attachskb+0x890/0x890 [ 2661.105946][T31296] ? __virt_addr_valid+0x61/0x2e0 04:38:37 executing program 2: io_setup(0xae7, &(0x7f0000000040)) io_setup(0x10000, &(0x7f0000000240)) io_setup(0x1, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000100)) io_setup(0x7, &(0x7f0000000140)) io_setup(0x4, &(0x7f0000000340)) [ 2661.148388][T31296] ? __phys_addr_symbol+0x30/0x70 [ 2661.159120][T31296] ? __check_object_size+0x2e2/0x5a0 [ 2661.182585][T31296] netlink_sendmsg+0x91b/0xe10 [ 2661.234443][T31296] ? netlink_unicast+0x7f0/0x7f0 [ 2661.255370][T31296] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2661.263231][T31296] ? netlink_unicast+0x7f0/0x7f0 [ 2661.299690][T31296] sock_sendmsg+0xd3/0x120 [ 2661.324090][T31296] ____sys_sendmsg+0x712/0x8c0 [ 2661.338914][T31296] ? kernel_sendmsg+0x50/0x50 [ 2661.343685][T31296] ? get_compat_msghdr+0xf9/0x150 [ 2661.398925][T31296] ? __get_compat_msghdr+0x4b0/0x4b0 [ 2661.404558][T31296] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2661.424596][T31296] ? futex_unqueue+0xb7/0x120 04:38:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x0, 0x4) sendto$inet(r4, &(0x7f0000000900)="1b652745df2e8a18c38a364e1deb9959d84b5db76343ae48863dd4043ee109268ffcf09e185b9fb901b30fc37bfe9adfb0dd39da2913a195cb6909331e6cac9343cd6a101f954db0d82856e4dbe07fb7792b9e46364f1efc2f048c7f36fd964fda3b4372b822a3138f13be7f2e56bceecb7cda27a13c9a0f40091e75de23e8deeabb4a6b828fe4fecf698cdbcc9c34e631b92a05b481bf5629b67314258876e6283e5fd654333b359ccd3692e5512e4bb3287919113bdacf986dc71367f2a4a2c10ec469a4ad05da51daad8a154fb1a7c7c091", 0xd3, 0xc0, &(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, r0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 2661.448409][T31296] ___sys_sendmsg+0x110/0x1b0 [ 2661.465035][T31296] ? do_recvmmsg+0x6e0/0x6e0 [ 2661.486638][T31296] ? __fget_files+0x248/0x440 [ 2661.529178][T31296] ? lock_downgrade+0x6e0/0x6e0 [ 2661.534610][T31296] ? __fget_files+0x26a/0x440 [ 2661.570302][T31296] ? __fget_light+0xe5/0x270 [ 2661.592213][T31296] __sys_sendmsg+0xf7/0x1c0 [ 2661.603345][T31296] ? __sys_sendmsg_sock+0x40/0x40 [ 2661.609376][T31296] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2661.615442][T31296] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2661.686231][T31296] __do_fast_syscall_32+0x65/0xf0 [ 2661.693734][T31296] do_fast_syscall_32+0x33/0x70 [ 2661.698995][T31296] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2661.705691][T31296] RIP: 0023:0xf7f31549 [ 2661.712127][T31296] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2661.765426][T31296] RSP: 002b:00000000f7f2c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2661.791096][T31296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000680 [ 2661.814054][T31296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2661.850005][T31296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2661.903627][T31296] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2661.946150][T31296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2661.980792][T31296] [ 2662.000671][T31296] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2662.008228][T31296] CPU: 1 PID: 31296 Comm: syz-executor.3 Not tainted 6.2.0-syzkaller #0 [ 2662.016789][T31296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2662.026895][T31296] Call Trace: [ 2662.030221][T31296] [ 2662.033200][T31296] dump_stack_lvl+0xd1/0x138 [ 2662.037865][T31296] panic+0x2cc/0x626 [ 2662.041872][T31296] ? panic_print_sys_info.part.0+0x110/0x110 [ 2662.047955][T31296] ? ieee80211_link_info_change_notify+0x1fd/0x270 [ 2662.054548][T31296] check_panic_on_warn.cold+0x19/0x35 [ 2662.059996][T31296] __warn+0xf2/0x1a0 [ 2662.064053][T31296] ? __wake_up_klogd.part.0+0x99/0xf0 [ 2662.069519][T31296] ? ieee80211_link_info_change_notify+0x1fd/0x270 [ 2662.076105][T31296] report_bug+0x1c0/0x210 [ 2662.080520][T31296] handle_bug+0x3c/0x70 [ 2662.084755][T31296] exc_invalid_op+0x18/0x50 [ 2662.089341][T31296] asm_exc_invalid_op+0x1a/0x20 [ 2662.094255][T31296] RIP: 0010:ieee80211_link_info_change_notify+0x1fd/0x270 [ 2662.101455][T31296] Code: 8b 9d 08 09 00 00 48 85 db 74 32 e8 1d 40 3e f8 48 89 dd e8 15 40 3e f8 44 89 f2 48 89 ee 48 c7 c7 20 3e 7c 8b e8 1e 0c 81 00 <0f> 0b e9 76 ff ff ff e8 f7 3f 3e f8 0f 0b e9 43 fe ff ff e8 eb 3f [ 2662.121142][T31296] RSP: 0018:ffffc900033e7460 EFLAGS: 00010282 [ 2662.127272][T31296] RAX: 0000000000000000 RBX: ffff888020a4c000 RCX: 0000000000000000 [ 2662.135296][T31296] RDX: 0000000000040000 RSI: ffffffff816622fc RDI: fffff5200067ce7e [ 2662.143325][T31296] RBP: ffff888020a4c000 R08: 0000000000000005 R09: 0000000000000000 04:38:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x20200) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c) r2 = open(&(0x7f0000000180)='./bus\x00', 0x143742, 0x0) ftruncate(r2, 0x2007ffc) r3 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000088, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000018002000000000000000000900000000040008800800005e0f7c94623ed294becc8adde83e5cee2f51de17a33fbf83fde8ec4d6e10570f4a8f17624131fbb3dcf02fa808b44790b128ab36635811921f"], 0x28}}, 0x0) splice(r4, &(0x7f0000000080)=0x8, r5, &(0x7f0000000140), 0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x6, 0x4) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 2662.151461][T31296] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000 [ 2662.159495][T31296] R13: ffff888020a4e248 R14: 0000000000000000 R15: ffff8880758586c0 [ 2662.167536][T31296] ? vprintk+0x8c/0xa0 [ 2662.171681][T31296] ieee80211_set_mcast_rate+0x42/0x50 [ 2662.177121][T31296] ? ieee80211_copy_mbssid_beacon+0x280/0x280 [ 2662.183256][T31296] nl80211_set_mcast_rate+0x361/0x6d0 [ 2662.188686][T31296] ? nl80211_tdls_cancel_channel_switch+0x660/0x660 [ 2662.195347][T31296] ? nl80211_pre_doit+0x120/0xab0 [ 2662.200445][T31296] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 2662.206685][T31296] ? genl_start+0x660/0x660 [ 2662.211260][T31296] ? apparmor_capable+0x1dc/0x460 [ 2662.216354][T31296] ? ns_capable+0xdd/0x100 [ 2662.220849][T31296] genl_rcv_msg+0x4ff/0x7e0 [ 2662.225438][T31296] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 2662.231849][T31296] ? __dev_queue_xmit+0xb54/0x3ba0 [ 2662.237038][T31296] ? validate_beacon_tx_rate+0x790/0x790 [ 2662.242734][T31296] ? nl80211_tdls_cancel_channel_switch+0x660/0x660 [ 2662.249395][T31296] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0 [ 2662.255285][T31296] netlink_rcv_skb+0x165/0x440 [ 2662.260125][T31296] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 2662.266539][T31296] ? netlink_ack+0x1370/0x1370 [ 2662.271399][T31296] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 2662.277196][T31296] ? netlink_deliver_tap+0x1b1/0xc50 [ 2662.282597][T31296] genl_rcv+0x28/0x40 [ 2662.286653][T31296] netlink_unicast+0x547/0x7f0 [ 2662.291504][T31296] ? netlink_attachskb+0x890/0x890 [ 2662.296780][T31296] ? __virt_addr_valid+0x61/0x2e0 [ 2662.301885][T31296] ? __phys_addr_symbol+0x30/0x70 [ 2662.307257][T31296] ? __check_object_size+0x2e2/0x5a0 [ 2662.312645][T31296] netlink_sendmsg+0x91b/0xe10 [ 2662.317516][T31296] ? netlink_unicast+0x7f0/0x7f0 [ 2662.322551][T31296] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2662.327919][T31296] ? netlink_unicast+0x7f0/0x7f0 [ 2662.332935][T31296] sock_sendmsg+0xd3/0x120 [ 2662.337416][T31296] ____sys_sendmsg+0x712/0x8c0 [ 2662.342261][T31296] ? kernel_sendmsg+0x50/0x50 [ 2662.347023][T31296] ? get_compat_msghdr+0xf9/0x150 [ 2662.352130][T31296] ? __get_compat_msghdr+0x4b0/0x4b0 [ 2662.357497][T31296] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2662.363566][T31296] ? futex_unqueue+0xb7/0x120 [ 2662.368319][T31296] ___sys_sendmsg+0x110/0x1b0 [ 2662.373077][T31296] ? do_recvmmsg+0x6e0/0x6e0 [ 2662.377752][T31296] ? __fget_files+0x248/0x440 [ 2662.382503][T31296] ? lock_downgrade+0x6e0/0x6e0 [ 2662.387460][T31296] ? __fget_files+0x26a/0x440 [ 2662.392212][T31296] ? __fget_light+0xe5/0x270 [ 2662.396972][T31296] __sys_sendmsg+0xf7/0x1c0 [ 2662.401546][T31296] ? __sys_sendmsg_sock+0x40/0x40 [ 2662.406648][T31296] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2662.412645][T31296] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2662.419307][T31296] __do_fast_syscall_32+0x65/0xf0 [ 2662.424408][T31296] do_fast_syscall_32+0x33/0x70 [ 2662.429337][T31296] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2662.435739][T31296] RIP: 0023:0xf7f31549 [ 2662.439862][T31296] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2662.459658][T31296] RSP: 002b:00000000f7f2c5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2662.468174][T31296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000680 [ 2662.476203][T31296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2662.484228][T31296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2662.492329][T31296] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2662.500349][T31296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2662.508394][T31296] [ 2662.511715][T31296] Kernel Offset: disabled [ 2662.516466][T31296] Rebooting in 86400 seconds..