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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe0101, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x80086601, 0x0) 20:19:18 executing program 5: add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 20:19:18 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @random="5b2463c446b8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1000", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0f0700", 0x0, 0x3a, 0x0, @empty, @mcast1, [], "80c2806130817067"}}}}}}}, 0x0) 20:19:18 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:18 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c4d608405804035082600000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 20:19:18 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20:19:18 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @random="5b2463c446b8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1000", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0f0700", 0x0, 0x3a, 0x0, @empty, @mcast1, [], "80c2806130817067"}}}}}}}, 0x0) 20:19:18 executing program 5: add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 20:19:18 executing program 5: add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 20:19:18 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:18 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:18 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) [ 1733.382578][T14262] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1733.412974][T14460] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1733.662511][T14460] usb 4-1: Using ep0 maxpacket: 32 [ 1733.752546][T14262] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.763045][T14262] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice=60.82 [ 1733.773030][T14262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.792727][T14262] usb 1-1: config 0 descriptor?? [ 1733.792768][T14460] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1733.834448][T14262] aiptek 1-1:0.0: interface has 0 endpoints, but must have minimum 1 [ 1733.846226][T14262] aiptek: probe of 1-1:0.0 failed with error -22 [ 1734.061566][T14461] usb 1-1: USB disconnect, device number 39 [ 1734.102921][T14460] usb 4-1: string descriptor 0 read error: -22 [ 1734.109305][T14460] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1734.118687][T14460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.152898][T15589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1734.176355][T14460] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1734.420554][T14262] usb 4-1: USB disconnect, device number 38 20:19:29 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe0101, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x80086601, 0x0) 20:19:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:29 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:29 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:29 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c4d608405804035082600000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 20:19:29 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:29 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) [ 1744.752792][T14461] usb 1-1: new high-speed USB device number 40 using dummy_hcd 20:19:29 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:29 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) [ 1745.122781][T14461] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.148981][T14461] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice=60.82 20:19:30 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) [ 1745.175829][T14461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.209871][T14461] usb 1-1: config 0 descriptor?? [ 1745.274533][T14461] aiptek 1-1:0.0: interface has 0 endpoints, but must have minimum 1 [ 1745.283873][T14461] aiptek: probe of 1-1:0.0 failed with error -22 [ 1745.503275][T14461] usb 1-1: USB disconnect, device number 40 20:19:42 executing program 0: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0xfffffffffffffff8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 20:19:42 executing program 5: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 20:19:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 20:19:42 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 20:19:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 20:19:42 executing program 5: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 20:19:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 20:19:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="d846bae7", 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eebb71a4976e23f0000008f6e2e2aba000000012e0b3836005404b0e0301a4ca875f2e3ff5f163ee340b7689500800000e8ffffff0001013c5811039e15775027ecce66fd952bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5eec336d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01010100664b"], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7000046, 0x0) 20:19:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 20:19:42 executing program 5: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 20:19:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7, 0x9, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 20:19:43 executing program 0: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0xfffffffffffffff8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 20:19:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x9}, "947a00", "b11d00000000000000000700", "3faf4d7f", "a7ca6b00df4649a8"}, 0x28) 20:19:43 executing program 5: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 20:19:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:19:43 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) clock_gettime(0x0, &(0x7f0000001c00)) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) 20:19:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x9}, "947a00", "b11d00000000000000000700", "3faf4d7f", "a7ca6b00df4649a8"}, 0x28) 20:19:43 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x9}, "947a00", "b11d00000000000000000700", "3faf4d7f", "a7ca6b00df4649a8"}, 0x28) 20:19:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x9}, "947a00", "b11d00000000000000000700", "3faf4d7f", "a7ca6b00df4649a8"}, 0x28) 20:19:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:19:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:19:51 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:51 executing program 0: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0xfffffffffffffff8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 20:19:51 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:19:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:51 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:19:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x2, 0x0}, 0x10) 20:19:51 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x40}, 0x20) 20:19:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:20:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:20:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x40}, 0x20) 20:20:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:20:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:20:11 executing program 0: pipe2$9p(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0xfffffffffffffff8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 20:20:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x40}, 0x20) 20:20:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x40}, 0x20) 20:20:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0xd, &(0x7f0000000000)=0x300, 0x4) [ 1786.508912][T15769] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns 20:20:11 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) [ 1786.569993][T15753] pit: kvm: requested 11733 ns i8254 timer period limited to 200000 ns 20:20:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e1f, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) 20:20:11 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) [ 1786.630651][T15753] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1786.661811][T15775] sctp: [Deprecated]: syz-executor.3 (pid 15775) Use of int in maxseg socket option. [ 1786.661811][T15775] Use struct sctp_assoc_value instead [ 1786.697632][T15753] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 1786.730535][T15753] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 1786.767406][T15753] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1786.788784][T15753] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1786.798315][T15753] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 1791.373874][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.380216][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:20:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc080aebe, &(0x7f0000000400)) 20:20:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0xd, &(0x7f0000000000)=0x300, 0x4) 20:20:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e1f, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) 20:20:20 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) 20:20:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e1f, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) [ 1795.702653][T15792] sctp: [Deprecated]: syz-executor.3 (pid 15792) Use of int in maxseg socket option. [ 1795.702653][T15792] Use struct sctp_assoc_value instead 20:20:20 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) 20:20:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e1f, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) 20:20:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0xd, &(0x7f0000000000)=0x300, 0x4) [ 1795.834516][T15799] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1795.853798][T15786] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1795.870615][T15802] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1795.897888][T15786] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns 20:20:21 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) 20:20:21 executing program 2: rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000280)="0f3802cbd37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01faad6aa1c463f9660f3a14bffeefffffde0064660f5154060aa89e6f67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000004c0)) r0 = gettid() rt_sigsuspend(&(0x7f0000000140), 0x8) tkill(r0, 0xd) [ 1795.944877][T15805] sctp: [Deprecated]: syz-executor.3 (pid 15805) Use of int in maxseg socket option. [ 1795.944877][T15805] Use struct sctp_assoc_value instead [ 1795.961449][T15786] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 1795.975768][T15786] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1796.010523][T15786] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1796.028442][T15786] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns 20:20:32 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) 20:20:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0xd, &(0x7f0000000000)=0x300, 0x4) 20:20:32 executing program 2: rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000280)="0f3802cbd37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01faad6aa1c463f9660f3a14bffeefffffde0064660f5154060aa89e6f67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000004c0)) r0 = gettid() rt_sigsuspend(&(0x7f0000000140), 0x8) tkill(r0, 0xd) 20:20:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:32 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) [ 1807.044512][T15822] sctp: [Deprecated]: syz-executor.3 (pid 15822) Use of int in maxseg socket option. [ 1807.044512][T15822] Use struct sctp_assoc_value instead 20:20:32 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000480)={{0xfd}, 'port1\x00'}) 20:20:32 executing program 2: rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000280)="0f3802cbd37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01faad6aa1c463f9660f3a14bffeefffffde0064660f5154060aa89e6f67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000004c0)) r0 = gettid() rt_sigsuspend(&(0x7f0000000140), 0x8) tkill(r0, 0xd) 20:20:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32370ace"}}) [ 1807.214914][T15837] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1807.246104][T15817] pit: kvm: requested 11733 ns i8254 timer period limited to 200000 ns 20:20:32 executing program 2: rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000280)="0f3802cbd37ff2f2438395ff1f965a00c4c1185c840561ee00007b7b01faad6aa1c463f9660f3a14bffeefffffde0064660f5154060aa89e6f67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000004c0)) r0 = gettid() rt_sigsuspend(&(0x7f0000000140), 0x8) tkill(r0, 0xd) [ 1807.271135][T15838] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1807.291186][T15817] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns 20:20:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32370ace"}}) [ 1807.316521][T15817] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 1807.338963][T15817] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 1807.373600][T15817] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1807.398969][T15817] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns 20:20:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32370ace"}}) [ 1807.435105][T15817] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns 20:20:45 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) 20:20:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) 20:20:45 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32370ace"}}) 20:20:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x400000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001300)={[{0x8, 0x101, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7}], 0x6}) 20:20:45 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) 20:20:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) 20:20:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) 20:20:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) 20:20:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) [ 1820.733838][T15874] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1820.746136][T15875] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1820.773104][T15862] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1820.798866][T15862] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 1820.833773][T15862] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns 20:20:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) 20:20:45 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x3c, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) [ 1820.857994][T15862] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1820.893079][T15862] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1820.922651][T15862] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns 20:20:56 executing program 2: syz_clone(0x8100000, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 20:20:56 executing program 3: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:20:56 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) 20:20:56 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) 20:20:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x35, 0x0, "63a5aabb6f29287e94cfb418006a722ee89363c0909cb95629c0c9b1a5aa02a05d501fbdf7992730f18b70fb8e918338b10fab3d074d249787433e487f07cbda80b75bc1a6885fcf47c954d7a58cea7a"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4), 0x1c) 20:20:56 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) getpriority(0x2, 0x0) 20:20:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x35, 0x0, "63a5aabb6f29287e94cfb418006a722ee89363c0909cb95629c0c9b1a5aa02a05d501fbdf7992730f18b70fb8e918338b10fab3d074d249787433e487f07cbda80b75bc1a6885fcf47c954d7a58cea7a"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4), 0x1c) 20:20:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='A', 0x1}, {&(0x7f00000001c0)='e', 0x7fffefff}], 0x2}}], 0x1, 0x0) 20:20:56 executing program 2: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:20:56 executing program 3: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:20:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x35, 0x0, "63a5aabb6f29287e94cfb418006a722ee89363c0909cb95629c0c9b1a5aa02a05d501fbdf7992730f18b70fb8e918338b10fab3d074d249787433e487f07cbda80b75bc1a6885fcf47c954d7a58cea7a"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4), 0x1c) 20:20:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x35, 0x0, "63a5aabb6f29287e94cfb418006a722ee89363c0909cb95629c0c9b1a5aa02a05d501fbdf7992730f18b70fb8e918338b10fab3d074d249787433e487f07cbda80b75bc1a6885fcf47c954d7a58cea7a"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4), 0x1c) 20:20:57 executing program 2: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:21:12 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:21:12 executing program 3: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:21:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='A', 0x1}, {&(0x7f00000001c0)='e', 0x7fffefff}], 0x2}}], 0x1, 0x0) 20:21:12 executing program 2: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:21:12 executing program 5: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:21:12 executing program 1: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setgroups(0x0, 0xfffffffffffffffe) 20:21:12 executing program 3: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:21:12 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:21:12 executing program 2: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:21:12 executing program 5: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:21:12 executing program 3: getitimer(0x0, 0x0) 20:21:12 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/109) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth1_to_batadv\x00'}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x14, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7ff4}], 0x1, 0x0, 0x0, 0x1980}}], 0xffffff1f, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffd78) 20:21:12 executing program 5: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x80) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 20:21:12 executing program 3: getitimer(0x0, 0x0) 20:21:12 executing program 3: getitimer(0x0, 0x0) 20:21:12 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "468413657024de19577ffeb90321881249ac2eb05736b6721122d54f66502423f239f11635e460affdbe7f556635d20148938e3e2595f0b70a95b770fa7a7b19"}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x3}, r0) 20:21:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='A', 0x1}, {&(0x7f00000001c0)='e', 0x7fffefff}], 0x2}}], 0x1, 0x0) [ 1852.814056][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.820397][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:21:23 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x29, &(0x7f00000001c0)={0x5, 0xf, 0x29, 0x4, [@wireless={0xb}, @ext_cap={0x7}, @wireless={0xb}, @ext_cap={0x7}]}}) 20:21:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='A', 0x1}, {&(0x7f00000001c0)='e', 0x7fffefff}], 0x2}}], 0x1, 0x0) 20:21:23 executing program 5: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:21:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x83, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) 20:21:23 executing program 3: getitimer(0x0, 0x0) 20:21:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "468413657024de19577ffeb90321881249ac2eb05736b6721122d54f66502423f239f11635e460affdbe7f556635d20148938e3e2595f0b70a95b770fa7a7b19"}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x3}, r0) 20:21:23 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @val={@void}, {@ipv4={0x6000, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 20:21:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "468413657024de19577ffeb90321881249ac2eb05736b6721122d54f66502423f239f11635e460affdbe7f556635d20148938e3e2595f0b70a95b770fa7a7b19"}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x3}, r0) 20:21:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x83, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) 20:21:23 executing program 5: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:21:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x83, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) 20:21:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "468413657024de19577ffeb90321881249ac2eb05736b6721122d54f66502423f239f11635e460affdbe7f556635d20148938e3e2595f0b70a95b770fa7a7b19"}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x3}, r0) [ 1864.862613][T14262] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1865.122398][T14262] usb 2-1: Using ep0 maxpacket: 8 [ 1865.322538][T14262] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1865.331380][T14262] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1865.341863][T14262] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1865.502468][T14262] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1865.511531][T14262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.519916][T14262] usb 2-1: Product: syz [ 1865.524570][T14262] usb 2-1: Manufacturer: syz [ 1865.529187][T14262] usb 2-1: SerialNumber: syz 20:21:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) 20:21:32 executing program 5: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:21:32 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @val={@void}, {@ipv4={0x6000, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 20:21:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x83, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) 20:21:32 executing program 4: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:21:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) 20:21:32 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @val={@void}, {@ipv4={0x6000, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 20:21:32 executing program 5: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x28}}, 0x0) 20:21:32 executing program 4: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) [ 1867.674998][T14262] usb 2-1: 0:2 : does not exist 20:21:32 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @val={@void}, {@ipv4={0x6000, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 1867.734175][T14262] usb 2-1: USB disconnect, device number 34 20:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x28}}, 0x0) [ 1867.824233][T15993] udevd[15993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 20:21:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:21:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) 20:21:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:21:52 executing program 4: r0 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 20:21:52 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:21:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x28}}, 0x0) 20:21:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x28}}, 0x0) 20:21:52 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:21:52 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:21:52 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:52 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:21:58 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:21:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) 20:21:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:21:58 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:58 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:58 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:58 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0xca2675951e77336d, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:21:58 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:21:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:21:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:21:59 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862301) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) 20:22:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:22:05 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:22:05 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:22:05 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:05 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r0, &(0x7f0000000140)="9c", 0x1, 0x200440d0, &(0x7f0000000300)={0x2, 0x0, @private=0xa010102}, 0x10) 20:22:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:22:15 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:15 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 20:22:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 20:22:15 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:15 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365f23a73797a2030303030303030303030303030301b303034303933b6d262d8969cdea1955cc91d4e7cd635a2cc5a7af513bab9564f489ca867f21184640b14ac669b0a83caf101e300a5bc601439868d32107cedac5a236882cdffa900159f6bb7cc00"/126], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000280)=""/206, 0xce) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f000019a000/0xc00000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000198000/0x4000)=nil) r2 = shmat(r1, &(0x7f00002ac000/0x3000)=nil, 0x1000) shmdt(r2) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f00004e8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000b2e000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 20:22:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:22:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1914.254013][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.260429][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:22:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24}, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x6, 0x1, {0x2}}}]}, 0x24}}, 0x0) 20:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 20:22:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 1: r0 = syz_io_uring_setup(0x5188, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x2, 0x0, 0x300) 20:22:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x7, 0x0, 0x0) 20:22:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:22:28 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x7, 0x0, 0x0) 20:22:28 executing program 5: io_uring_setup(0x3d9, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xffffffff}) 20:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) [ 1923.219582][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.247334][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:22:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600190a"], 0x31}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 20:22:28 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x7, 0x0, 0x0) [ 1923.265245][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.275793][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.292912][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:22:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, 0x0, &(0x7f0000000200)) [ 1923.326608][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.358294][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.379684][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.410998][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.431267][T16141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:22:43 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x20011, r2, 0x0) write$binfmt_script(r2, &(0x7f0000001400)={'#! ', './file0', [{0x20, '($^'}, {0x20, '/proc/bus/input/devices\x00'}, {0x20, '/dev/cuse\x00'}, {0x20, '\x00'}, {0x20, '/dev/cuse\x00'}, {0x20, '/proc/bus/input/devices\x00'}, {}, {0x20, '/proc/keys\x00'}], 0xa, "0dcf402904e9022e832e6d54cce1fd02b1de2d86335d6f548c301011e67593de38ef6f36e766c5713be3ee62bbd5a5fe316ade8069e9c2964667788a12377a161d5817291c91364084d8fa1a6a24d354737aa12d99a4570ee6857923581858eb266def3b7594fdadff8e68a6de21d2c15354"}, 0xd8) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@local, @in6=@private0, 0x4e24, 0x7, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x73}, {0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x101}, {0x0, 0x9, 0x0, 0xfffffffffffff001}, 0xffffffe0, 0x0, 0x2, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4d6}, 0xa, @in6=@local, 0x10000, 0x0, 0x3, 0x5, 0x9, 0x4}}, 0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) recvfrom(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=@ax25={{0x3, @bcast, 0x2}, [@default, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) 20:22:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001140)={0x1, {0x0, 0x0, 0x0}}, 0x48) 20:22:43 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x7, 0x0, 0x0) 20:22:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 20:22:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)={0x7, 0x0, 0x0, "ef0e3cb7e1d155"}) 20:22:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:22:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001140)={0x1, {0x0, 0x0, 0x0}}, 0x48) 20:22:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)={0x7, 0x0, 0x0, "ef0e3cb7e1d155"}) 20:22:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x2ff}]}) 20:22:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 20:22:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001140)={0x1, {0x0, 0x0, 0x0}}, 0x48) 20:22:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)={0x7, 0x0, 0x0, "ef0e3cb7e1d155"}) [ 1938.674409][T16171] net_ratelimit: 1014 callbacks suppressed [ 1938.674429][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.711953][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.741869][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.760177][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.796039][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.818448][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.842745][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.851938][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.860985][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.880583][T16171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:22:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 20:22:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001140)={0x1, {0x0, 0x0, 0x0}}, 0x48) 20:22:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 20:22:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)={0x7, 0x0, 0x0, "ef0e3cb7e1d155"}) 20:22:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x2ff}]}) 20:22:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:22:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)={0x18, 0x27, 0x301, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @ipv4}]}, 0x18}], 0x1}, 0x0) 20:22:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 20:22:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002d00)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab30193e9b12b844090bfb926cff3982d1b33ba20ddc5144", 0x18) 20:22:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x2ff}]}) [ 1950.041168][T16198] net_ratelimit: 1014 callbacks suppressed [ 1950.041188][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.046138][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1950.063775][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:22:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002d00)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab30193e9b12b844090bfb926cff3982d1b33ba20ddc5144", 0x18) [ 1950.096198][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1950.106435][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.121889][T16199] unsupported nlmsg_type 40 [ 1950.130976][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:22:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)) [ 1950.147289][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.168614][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.230644][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.259691][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.275177][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.288773][T16198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:23:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)={0x18, 0x27, 0x301, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @ipv4}]}, 0x18}], 0x1}, 0x0) 20:23:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002d00)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab30193e9b12b844090bfb926cff3982d1b33ba20ddc5144", 0x18) 20:23:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)) 20:23:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x2ff}]}) 20:23:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:23:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)) 20:23:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002d00)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab30193e9b12b844090bfb926cff3982d1b33ba20ddc5144", 0x18) [ 1959.324759][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 1959.404629][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1959.440394][T16227] net_ratelimit: 1014 callbacks suppressed [ 1959.440416][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:23:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)) 20:23:04 executing program 3: socketpair(0x22, 0x0, 0x1, &(0x7f0000000240)) 20:23:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)={0x18, 0x27, 0x301, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @ipv4}]}, 0x18}], 0x1}, 0x0) [ 1959.517630][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.542904][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.564845][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.579302][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1959.593685][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.602093][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1959.614070][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.630088][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.647872][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.666117][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.674926][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:23:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 20:23:18 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0x4) 20:23:18 executing program 3: socketpair(0x22, 0x0, 0x1, &(0x7f0000000240)) 20:23:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)={0x18, 0x27, 0x301, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @ipv4}]}, 0x18}], 0x1}, 0x0) 20:23:18 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000001c0), 0x8) 20:23:19 executing program 3: socketpair(0x22, 0x0, 0x1, &(0x7f0000000240)) 20:23:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 20:23:19 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0x4) [ 1973.915537][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1973.942514][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 20:23:19 executing program 3: socketpair(0x22, 0x0, 0x1, &(0x7f0000000240)) 20:23:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 1975.703449][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.709873][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:23:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0x4) 20:23:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:32 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000001c0), 0x8) 20:23:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:32 executing program 3: r0 = syz_io_uring_setup(0x4944, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) 20:23:32 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000001c0), 0x8) 20:23:32 executing program 3: r0 = syz_io_uring_setup(0x4944, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) 20:23:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0x4) 20:23:32 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000001c0), 0x8) 20:23:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x3}}, 0x26) 20:23:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/106) 20:23:40 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:40 executing program 3: r0 = syz_io_uring_setup(0x4944, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) 20:23:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:40 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:40 executing program 3: r0 = syz_io_uring_setup(0x4944, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) 20:23:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:41 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:55 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:55 executing program 1: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffd09}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 20:23:55 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:23:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_mreq(r0, 0x0, 0x1, &(0x7f0000000180)={@empty, @multicast1}, 0x8) 20:23:55 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:55 executing program 5: syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 20:23:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_mreq(r0, 0x0, 0x1, &(0x7f0000000180)={@empty, @multicast1}, 0x8) 20:23:55 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:23:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x4}]}, 0x38}}, 0x0) 20:24:05 executing program 1: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:24:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_mreq(r0, 0x0, 0x1, &(0x7f0000000180)={@empty, @multicast1}, 0x8) 20:24:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x4}]}, 0x38}}, 0x0) 20:24:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x730c5256932cae39, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:24:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x730c5256932cae39, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:24:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x4}]}, 0x38}}, 0x0) 20:24:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_mreq(r0, 0x0, 0x1, &(0x7f0000000180)={@empty, @multicast1}, 0x8) 20:24:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x730c5256932cae39, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:24:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2e7d9b13ed5563d7, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 20:24:14 executing program 1: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:24:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x4}]}, 0x38}}, 0x0) 20:24:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x730c5256932cae39, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:24:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2e7d9b13ed5563d7, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 20:24:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2e7d9b13ed5563d7, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 20:24:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)=',', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000280)="85", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000180)="c2", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 20:24:14 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2e, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 20:24:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2e7d9b13ed5563d7, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 20:24:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:14 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2e, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 20:24:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:19 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 20:24:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)=',', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000280)="85", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000180)="c2", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 20:24:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000243000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f788a006000000f0131b99b0900000f32f0811865dd9992b9800000c00f3235000100000f300f20c035000004000f22c0f20f2a20b8080000000f23d00f21f835100000080f23f80f06b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:24:19 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2e, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 20:24:19 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2e, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 20:24:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)=',', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000280)="85", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000180)="c2", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 20:24:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20:24:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)=',', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000280)="85", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000180)="c2", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 20:24:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) [ 2034.522465][T14260] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2034.772317][T14260] usb 1-1: Using ep0 maxpacket: 32 [ 2034.894081][T14260] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2035.072486][T14260] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2035.086480][T14260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.095070][T14260] usb 1-1: Product: syz [ 2035.099352][T14260] usb 1-1: Manufacturer: syz [ 2035.104517][T14260] usb 1-1: SerialNumber: syz [ 2035.132829][T16414] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2035.153713][T14260] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2035.357983][T14461] usb 1-1: USB disconnect, device number 41 [ 2037.133275][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.139565][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:24:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20:24:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20:24:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:32 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 20:24:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20:24:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20:24:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20:24:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_SPORT={0x6}, @RTA_FLOW={0x8}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_TABLE={0x8}]}, 0x44}}, 0x0) 20:24:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@private}}, [@mark={0xc}, @etimer_thresh={0x8}]}, 0x64}}, 0x0) 20:24:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) [ 2048.082550][T14461] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2048.322333][T14461] usb 1-1: Using ep0 maxpacket: 32 [ 2048.442814][T14461] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2048.622506][T14461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2048.631581][T14461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.640568][T14461] usb 1-1: Product: syz [ 2048.645089][T14461] usb 1-1: Manufacturer: syz [ 2048.649699][T14461] usb 1-1: SerialNumber: syz [ 2048.682758][T16459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2048.704818][T14461] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2048.944795][T14260] usb 1-1: USB disconnect, device number 42 20:24:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@private}}, [@mark={0xc}, @etimer_thresh={0x8}]}, 0x64}}, 0x0) 20:24:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) 20:24:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0}) 20:24:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_SPORT={0x6}, @RTA_FLOW={0x8}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_TABLE={0x8}]}, 0x44}}, 0x0) 20:24:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 20:24:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_SPORT={0x6}, @RTA_FLOW={0x8}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_TABLE={0x8}]}, 0x44}}, 0x0) 20:24:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@private}}, [@mark={0xc}, @etimer_thresh={0x8}]}, 0x64}}, 0x0) 20:24:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_SPORT={0x6}, @RTA_FLOW={0x8}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_TABLE={0x8}]}, 0x44}}, 0x0) 20:24:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) 20:24:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) 20:24:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@private}}, [@mark={0xc}, @etimer_thresh={0x8}]}, 0x64}}, 0x0) 20:24:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) [ 2061.542346][T14261] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2061.792338][T14261] usb 1-1: Using ep0 maxpacket: 32 [ 2061.912710][T14261] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2062.082943][T14261] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2062.092017][T14261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.100815][T14261] usb 1-1: Product: syz [ 2062.105730][T14261] usb 1-1: Manufacturer: syz [ 2062.110335][T14261] usb 1-1: SerialNumber: syz [ 2062.143645][T16486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2062.171904][T14261] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2062.402306][ T5242] usb 1-1: USB disconnect, device number 43 20:24:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x1, 0xb}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:24:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) 20:24:54 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000280)={0xc, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 20:24:54 executing program 2: syz_emit_ethernet(0xd4, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, ';\vO', 0x9e, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x0]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0], "f559f29fce0ba71850a1de13b3a0d3bc7180949c2ed44c5580eadd0597fcdc13d4908fa1bdc5065eb6ff2f78f1395451fee50bdcdb168494a6f5534cbe40d038f46b243f7acaf0dad9f0b7a9c791c469ab19"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x5, 0x2}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x0, 0x0, 0x0, 0x18, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 20:24:54 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3f, 0x2) write$snddsp(r0, &(0x7f0000000040)="58d8dd40ecf6f5492261a831259a992e112b8d3258f1e05ede1c0a657b294606834dc70f4c1c4aee94bd7159920478654566f7a73581b585ff8734b0926a50bf586eecfb1b6014f9dfb9ad40186f96878a1d2714a01eb44292f24a7bafbc68cb2662f3d0a3fd0859330be420a29f7d4a8637163c6c00595c8384424f2ff11acb3d9072bef9b126fe354c7170d66e6c7ce7b922881615388ad88227cf987c4e088e3fe03d796ab4cadded7548098f91fb9682b54d2621edb0dff38cdfa950f9820ab61a", 0xfc79) 20:24:54 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 20:24:55 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000280)={0xc, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 20:24:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000180)) 20:24:55 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) [ 2069.893586][T16514] net_ratelimit: 1014 callbacks suppressed [ 2069.893606][T16514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:24:55 executing program 2: syz_emit_ethernet(0xd4, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, ';\vO', 0x9e, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x0]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0], "f559f29fce0ba71850a1de13b3a0d3bc7180949c2ed44c5580eadd0597fcdc13d4908fa1bdc5065eb6ff2f78f1395451fee50bdcdb168494a6f5534cbe40d038f46b243f7acaf0dad9f0b7a9c791c469ab19"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x5, 0x2}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x0, 0x0, 0x0, 0x18, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 20:24:55 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000280)={0xc, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 20:24:55 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) [ 2070.172756][T14461] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2070.432275][T14461] usb 1-1: Using ep0 maxpacket: 32 [ 2070.552592][T14461] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2070.742716][T14461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2070.751821][T14461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.770035][T14461] usb 1-1: Product: syz [ 2070.774629][T14461] usb 1-1: Manufacturer: syz [ 2070.779375][T14461] usb 1-1: SerialNumber: syz [ 2070.812818][T16513] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2070.843903][T14461] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2070.902486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.074286][T14461] usb 1-1: USB disconnect, device number 44 [ 2071.943043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:25:01 executing program 2: syz_emit_ethernet(0xd4, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, ';\vO', 0x9e, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x0]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0], "f559f29fce0ba71850a1de13b3a0d3bc7180949c2ed44c5580eadd0597fcdc13d4908fa1bdc5065eb6ff2f78f1395451fee50bdcdb168494a6f5534cbe40d038f46b243f7acaf0dad9f0b7a9c791c469ab19"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x5, 0x2}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x0, 0x0, 0x0, 0x18, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 20:25:01 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 20:25:01 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 20:25:01 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000280)={0xc, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 20:25:01 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 20:25:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x1, 0xb}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:25:01 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 20:25:01 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 20:25:01 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) [ 2076.222590][T16540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:25:01 executing program 2: syz_emit_ethernet(0xd4, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, ';\vO', 0x9e, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x0]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0], "f559f29fce0ba71850a1de13b3a0d3bc7180949c2ed44c5580eadd0597fcdc13d4908fa1bdc5065eb6ff2f78f1395451fee50bdcdb168494a6f5534cbe40d038f46b243f7acaf0dad9f0b7a9c791c469ab19"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x5, 0x2}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x0, 0x0, 0x0, 0x18, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 20:25:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) 20:25:01 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) [ 2077.292451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.342585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 20:25:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x1, 0xb}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:25:12 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 20:25:12 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 20:25:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote}}}], 0x28}, 0x0) 20:25:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0x2, 0x0, 0x0, @mcast1}, r1}}, 0x48) 20:25:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x4b}, 0x8) 20:25:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x4b}, 0x8) 20:25:12 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xffffffff, @private}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:25:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0x2, 0x0, 0x0, @mcast1}, r1}}, 0x48) 20:25:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x3d4, 0x49c, 0x198, 0x0, 0x3d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'gre0\x00', 'hsr0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4, @remote, [], [], 'batadv0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x58c) 20:25:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote}}}], 0x28}, 0x0) 20:25:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x4b}, 0x8) 20:25:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x3d4, 0x49c, 0x198, 0x0, 0x3d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'gre0\x00', 'hsr0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4, @remote, [], [], 'batadv0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x58c) 20:25:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0x2, 0x0, 0x0, @mcast1}, r1}}, 0x48) 20:25:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x1, 0xb}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:25:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x4b}, 0x8) 20:25:21 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xffffffff, @private}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:25:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote}}}], 0x28}, 0x0) 20:25:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1}, {0x2, 0x0, 0x0, @mcast1}, r1}}, 0x48) 20:25:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x3d4, 0x49c, 0x198, 0x0, 0x3d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'gre0\x00', 'hsr0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4, @remote, [], [], 'batadv0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x58c) 20:25:21 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xffffffff, @private}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:25:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote}}}], 0x28}, 0x0) 20:25:21 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xffffffff, @private}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:25:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x3d4, 0x49c, 0x198, 0x0, 0x3d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x5d4, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'gre0\x00', 'hsr0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4, @remote, [], [], 'batadv0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x58c) 20:25:21 executing program 5: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) [ 2096.184532][T16604] ======================================================= [ 2096.184532][T16604] WARNING: The mand mount option has been deprecated and [ 2096.184532][T16604] and is ignored by this kernel. Remove the mand [ 2096.184532][T16604] option from the mount to silence this warning. [ 2096.184532][T16604] ======================================================= [ 2098.583650][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.589969][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:25:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x3, 0x6, 0x9effffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 20:25:30 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:30 executing program 5: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 20:25:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:30 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:30 executing program 5: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 20:25:30 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:30 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:30 executing program 5: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 20:25:31 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:45 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:25:45 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x65842500, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 20:25:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:25:46 executing program 4: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 20:25:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x6, &(0x7f0000001680)=0x0) io_submit(r1, 0x1, &(0x7f0000001b00)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 20:26:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20:26:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) readv(r1, &(0x7f00000027c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 20:26:11 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) 20:26:11 executing program 4: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 20:26:11 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x806, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:26:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote}}}], 0x18}, 0x0) 20:26:11 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x806, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:26:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x200000000000084, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}]}, 0x18c) 20:26:11 executing program 5: openat$cgroup_root(0xffffff9c, &(0x7f0000001a00)='./cgroup.net/syz0\x00', 0x200002, 0x0) 20:26:11 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x806, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:26:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x200000000000084, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}]}, 0x18c) 20:26:11 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x0, 0x0) [ 2146.212378][T16659] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2146.452308][T16659] usb 4-1: Using ep0 maxpacket: 32 [ 2146.732430][T16659] usb 4-1: New USB device found, idVendor=7947, idProduct=fbbe, bcdDevice=da.4a [ 2146.746242][T16659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.754883][T16659] usb 4-1: Product: syz [ 2146.759174][T16659] usb 4-1: Manufacturer: syz [ 2146.764363][T16659] usb 4-1: SerialNumber: syz [ 2146.771836][T16659] usb 4-1: config 0 descriptor?? [ 2147.019323][T16659] usb 4-1: USB disconnect, device number 39 20:26:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x200000000000084, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}]}, 0x18c) 20:26:21 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x806, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 20:26:21 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x0, 0x0) 20:26:21 executing program 4: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 20:26:21 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) 20:26:21 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) 20:26:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x200000000000084, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}]}, 0x18c) 20:26:21 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x0, 0x0) 20:26:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x80}}, 0x18}}, 0x0) 20:26:22 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:22 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x0, 0x0) 20:26:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x80}}, 0x18}}, 0x0) 20:26:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) [ 2157.094268][ T5242] usb 4-1: new high-speed USB device number 40 using dummy_hcd 20:26:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x80}}, 0x18}}, 0x0) [ 2157.352297][ T5242] usb 4-1: Using ep0 maxpacket: 32 [ 2157.693427][ T5242] usb 4-1: New USB device found, idVendor=7947, idProduct=fbbe, bcdDevice=da.4a [ 2157.704709][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.714278][ T5242] usb 4-1: Product: syz [ 2157.718572][ T5242] usb 4-1: Manufacturer: syz [ 2157.723734][ T5242] usb 4-1: SerialNumber: syz [ 2157.733222][ T5242] usb 4-1: config 0 descriptor?? [ 2158.019694][T14459] usb 4-1: USB disconnect, device number 40 20:26:23 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) [ 2158.832346][T16658] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2159.072478][T16658] usb 4-1: Using ep0 maxpacket: 32 [ 2159.352350][T16658] usb 4-1: New USB device found, idVendor=7947, idProduct=fbbe, bcdDevice=da.4a [ 2159.361598][T16658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.380547][T16658] usb 4-1: Product: syz [ 2159.384874][T16658] usb 4-1: Manufacturer: syz [ 2159.389489][T16658] usb 4-1: SerialNumber: syz [ 2159.403237][T16658] usb 4-1: config 0 descriptor?? [ 2159.677240][T16660] usb 4-1: USB disconnect, device number 41 [ 2160.013170][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.019547][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2167.812701][T16658] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2168.052459][T16658] usb 2-1: Using ep0 maxpacket: 32 [ 2168.332590][T16658] usb 2-1: New USB device found, idVendor=7947, idProduct=fbbe, bcdDevice=da.4a [ 2168.341686][T16658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.350246][T16658] usb 2-1: Product: syz [ 2168.354737][T16658] usb 2-1: Manufacturer: syz [ 2168.359479][T16658] usb 2-1: SerialNumber: syz [ 2168.383257][T16658] usb 2-1: config 0 descriptor?? 20:26:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) 20:26:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x80}}, 0x18}}, 0x0) 20:26:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) [ 2170.569221][T16660] usb 2-1: USB disconnect, device number 35 20:26:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) [ 2170.862469][ T5242] usb 4-1: new high-speed USB device number 42 using dummy_hcd 20:26:36 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 2171.102842][ T5242] usb 4-1: Using ep0 maxpacket: 32 [ 2171.382366][ T5242] usb 4-1: New USB device found, idVendor=7947, idProduct=fbbe, bcdDevice=da.4a [ 2171.391552][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.400203][ T5242] usb 4-1: Product: syz [ 2171.404791][ T5242] usb 4-1: Manufacturer: syz [ 2171.409468][ T5242] usb 4-1: SerialNumber: syz [ 2171.425103][ T5242] usb 4-1: config 0 descriptor?? [ 2171.692924][T16660] usb 4-1: USB disconnect, device number 42 [ 2179.162269][T16658] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2179.402274][T16658] usb 2-1: Using ep0 maxpacket: 32 [ 2179.682356][T16658] usb 2-1: New USB device found, idVendor=7947, idProduct=fbbe, bcdDevice=da.4a [ 2179.691435][T16658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.700164][T16658] usb 2-1: Product: syz [ 2179.704719][T16658] usb 2-1: Manufacturer: syz [ 2179.709371][T16658] usb 2-1: SerialNumber: syz [ 2179.720426][T16658] usb 2-1: config 0 descriptor?? 20:26:44 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x20, 0x7947, 0xfbbe, 0xda4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xde, 0x70}}]}}]}}, 0x0) 20:26:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) 20:26:44 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 20:26:44 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 20:26:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 20:26:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, &(0x7f0000001100)) [ 2179.820327][T14459] usb 2-1: USB disconnect, device number 36 20:26:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) [ 2179.924707][T16820] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 20:26:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, &(0x7f0000001100)) 20:26:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) [ 2179.973588][T16820] CPU: 1 PID: 16820 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 2179.984128][T16820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.994201][T16820] Call Trace: [ 2179.997494][T16820] [ 2180.000443][T16820] dump_stack_lvl+0xcd/0x134 [ 2180.005143][T16820] dump_header+0x10b/0x7f9 [ 2180.009627][T16820] oom_kill_process.cold+0x10/0x15 [ 2180.014773][T16820] out_of_memory+0x358/0x14b0 20:26:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) [ 2180.019535][T16820] ? oom_killer_disable+0x270/0x270 [ 2180.024758][T16820] ? find_held_lock+0x2d/0x110 [ 2180.029580][T16820] mem_cgroup_out_of_memory+0x206/0x270 [ 2180.035189][T16820] ? mem_cgroup_margin+0x130/0x130 [ 2180.040337][T16820] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2180.046192][T16820] memory_max_write+0x263/0x3c0 [ 2180.051303][T16820] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2180.057404][T16820] ? lock_release+0x720/0x720 [ 2180.062116][T16820] cgroup_file_write+0x1de/0x760 [ 2180.067132][T16820] ? mem_cgroup_force_empty_write+0x150/0x150 20:26:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) [ 2180.073228][T16820] ? kill_css+0x370/0x370 [ 2180.077579][T16820] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2180.083957][T16820] ? kill_css+0x370/0x370 [ 2180.088402][T16820] kernfs_fop_write_iter+0x3f8/0x610 [ 2180.093825][T16820] new_sync_write+0x431/0x660 [ 2180.098602][T16820] ? new_sync_read+0x6e0/0x6e0 [ 2180.103403][T16820] ? lock_release+0x720/0x720 [ 2180.108130][T16820] vfs_write+0x7cd/0xae0 [ 2180.112409][T16820] ksys_write+0x12d/0x250 [ 2180.116765][T16820] ? __ia32_sys_read+0xb0/0xb0 20:26:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) [ 2180.121554][T16820] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 2180.128206][T16820] __do_fast_syscall_32+0x65/0xf0 [ 2180.133362][T16820] do_fast_syscall_32+0x2f/0x70 [ 2180.138241][T16820] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.144648][T16820] RIP: 0023:0xf6f60549 [ 2180.148750][T16820] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2180.168379][T16820] RSP: 002b:00000000f595a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2180.176821][T16820] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080 [ 2180.184812][T16820] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2180.192977][T16820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2180.200962][T16820] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2180.209041][T16820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2180.217036][T16820] [ 2180.229471][T16820] memory: usage 1744kB, limit 0kB, failcnt 19 [ 2180.238719][T16820] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2180.248240][T16820] Memory cgroup stats for /syz0: [ 2180.249363][T16820] anon 155648 [ 2180.249363][T16820] file 155648 [ 2180.249363][T16820] kernel_stack 65536 [ 2180.249363][T16820] pagetables 86016 [ 2180.249363][T16820] percpu 0 [ 2180.249363][T16820] sock 0 [ 2180.249363][T16820] vmalloc 0 [ 2180.249363][T16820] shmem 155648 [ 2180.249363][T16820] file_mapped 122880 [ 2180.249363][T16820] file_dirty 0 [ 2180.249363][T16820] file_writeback 0 [ 2180.249363][T16820] swapcached 0 [ 2180.249363][T16820] anon_thp 0 [ 2180.249363][T16820] file_thp 0 [ 2180.249363][T16820] shmem_thp 0 [ 2180.249363][T16820] inactive_anon 143360 [ 2180.249363][T16820] active_anon 151552 [ 2180.249363][T16820] inactive_file 0 [ 2180.249363][T16820] active_file 0 [ 2180.249363][T16820] unevictable 16384 [ 2180.249363][T16820] slab_reclaimable 141768 [ 2180.249363][T16820] slab_unreclaimable 1165864 [ 2180.249363][T16820] slab 1307632 [ 2180.249363][T16820] workingset_refault_anon 0 [ 2180.249363][T16820] workingset_refault_file 0 [ 2180.350237][T16820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=3607,uid=0 [ 2180.379568][T16820] Memory cgroup out of memory: Killed process 3607 (syz-executor.0) total-vm:56456kB, anon-rss:332kB, file-rss:15168kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2180.400391][ T27] oom_reaper: reaped process 3607 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2180.425349][T16815] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2180.441461][T16815] CPU: 1 PID: 16815 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 2180.452011][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2180.462210][T16815] Call Trace: [ 2180.465566][T16815] [ 2180.468498][T16815] dump_stack_lvl+0xcd/0x134 [ 2180.473106][T16815] dump_header+0x10b/0x7f9 [ 2180.477523][T16815] oom_kill_process.cold+0x10/0x15 [ 2180.482634][T16815] out_of_memory+0x358/0x14b0 [ 2180.487299][T16815] ? find_held_lock+0x2d/0x110 [ 2180.492055][T16815] ? oom_killer_disable+0x270/0x270 [ 2180.497360][T16815] ? find_held_lock+0x2d/0x110 [ 2180.502131][T16815] mem_cgroup_out_of_memory+0x206/0x270 [ 2180.507976][T16815] ? mem_cgroup_margin+0x130/0x130 [ 2180.513159][T16815] ? lock_downgrade+0x6e0/0x6e0 [ 2180.518005][T16815] try_charge_memcg+0xe06/0x1130 [ 2180.522962][T16815] ? mem_cgroup_oom_trylock+0x220/0x220 [ 2180.528497][T16815] ? get_mem_cgroup_from_mm+0x12f/0x6c0 [ 2180.534287][T16815] ? lock_downgrade+0x6e0/0x6e0 [ 2180.539135][T16815] charge_memcg+0xae/0x360 [ 2180.543562][T16815] __mem_cgroup_charge+0x27/0x90 [ 2180.548525][T16815] wp_page_copy+0x28c/0x2270 [ 2180.553178][T16815] ? do_page_mkwrite+0x550/0x550 [ 2180.558122][T16815] ? lock_downgrade+0x6e0/0x6e0 [ 2180.562991][T16815] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2180.568721][T16815] ? vm_normal_page+0x146/0x2a0 [ 2180.573749][T16815] do_wp_page+0x2cb/0x1ae0 [ 2180.578163][T16815] __handle_mm_fault+0x1f31/0x5110 [ 2180.583336][T16815] ? vm_iomap_memory+0x190/0x190 [ 2180.588277][T16815] handle_mm_fault+0x1c8/0x790 [ 2180.593042][T16815] do_user_addr_fault+0x489/0x11c0 [ 2180.598404][T16815] exc_page_fault+0x9e/0x180 [ 2180.602998][T16815] ? asm_exc_page_fault+0x8/0x30 [ 2180.608038][T16815] asm_exc_page_fault+0x1e/0x30 [ 2180.613107][T16815] RIP: 0023:0xf6eeeb3a [ 2180.617184][T16815] Code: ec ef ff ff 83 c4 10 83 c3 01 83 c7 20 39 eb 75 d7 8b 44 24 18 89 30 8b 74 24 10 8b 86 00 20 02 00 8b 96 c8 f2 f5 00 83 c0 01 <89> 86 00 20 02 00 89 02 83 c4 2c 5b 5e 5f 5d c3 8d b6 00 00 00 00 [ 2180.636787][T16815] RSP: 002b:00000000f7562ad0 EFLAGS: 00010202 [ 2180.642849][T16815] RAX: 0000000000000001 RBX: 000000002c920014 RCX: 000000002c921cd8 [ 2180.650848][T16815] RDX: 000000002c920000 RSI: 00000000f7009000 RDI: 00000000ffffffff [ 2180.658826][T16815] RBP: 00000000f702e008 R08: 0000000000000000 R09: 0000000000000000 [ 2180.666795][T16815] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2180.674787][T16815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2180.682767][T16815] [ 2180.700202][T16815] memory: usage 1596kB, limit 0kB, failcnt 53 [ 2180.707334][T16815] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2180.727357][T16815] Memory cgroup stats for /syz0: [ 2180.728330][T16815] anon 135168 [ 2180.728330][T16815] file 155648 [ 2180.728330][T16815] kernel_stack 32768 [ 2180.728330][T16815] pagetables 77824 [ 2180.728330][T16815] percpu 0 [ 2180.728330][T16815] sock 0 [ 2180.728330][T16815] vmalloc 0 [ 2180.728330][T16815] shmem 155648 [ 2180.728330][T16815] file_mapped 122880 [ 2180.728330][T16815] file_dirty 0 [ 2180.728330][T16815] file_writeback 0 [ 2180.728330][T16815] swapcached 0 [ 2180.728330][T16815] anon_thp 0 [ 2180.728330][T16815] file_thp 0 [ 2180.728330][T16815] shmem_thp 0 [ 2180.728330][T16815] inactive_anon 122880 [ 2180.728330][T16815] active_anon 151552 [ 2180.728330][T16815] inactive_file 0 [ 2180.728330][T16815] active_file 0 [ 2180.728330][T16815] unevictable 16384 [ 2180.728330][T16815] slab_reclaimable 127848 [ 2180.728330][T16815] slab_unreclaimable 1091552 [ 2180.728330][T16815] slab 1219400 [ 2180.728330][T16815] workingset_refault_anon 0 [ 2180.728330][T16815] workingset_refault_file 0 [ 2180.826117][T16815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16815,uid=0 [ 2180.844552][T16815] Memory cgroup out of memory: Killed process 16815 (syz-executor.0) total-vm:62476kB, anon-rss:348kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2180.865681][ T27] oom_reaper: reaped process 16815 (syz-executor.0), now anon-rss:0kB, file-rss:13684kB, shmem-rss:0kB [ 2180.957614][ T6275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.119090][ T6275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.203229][ T6275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.272061][ T6275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.387441][ T6275] device hsr_slave_0 left promiscuous mode [ 2182.403017][ T6275] device hsr_slave_1 left promiscuous mode [ 2182.413138][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2182.420745][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2182.453538][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2182.461005][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2182.490352][ T6275] device bridge_slave_1 left promiscuous mode [ 2182.504681][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.537697][ T6275] device bridge_slave_0 left promiscuous mode [ 2182.561004][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.596112][ T6275] device veth1_macvtap left promiscuous mode [ 2182.603632][ T6275] device veth0_macvtap left promiscuous mode [ 2182.609693][ T6275] device veth1_vlan left promiscuous mode [ 2182.616347][ T6275] device veth0_vlan left promiscuous mode [ 2183.226756][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 2183.239959][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 2183.259098][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2183.285259][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2183.369517][ T6275] bond0 (unregistering): Released all slaves 20:27:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 20:27:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) 20:27:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) 20:27:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, &(0x7f0000001100)) 20:27:00 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 20:27:00 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 20:27:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) 20:27:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, &(0x7f0000001100)) [ 2195.507227][T17077] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2195.543922][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2195.558942][T17077] CPU: 0 PID: 17077 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 2195.569481][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2195.579677][T17077] Call Trace: [ 2195.582964][T17077] [ 2195.585909][T17077] dump_stack_lvl+0xcd/0x134 [ 2195.590529][T17077] dump_header+0x10b/0x7f9 [ 2195.594981][T17077] out_of_memory.cold+0x5e/0x16c [ 2195.599961][T17077] ? oom_killer_disable+0x270/0x270 [ 2195.605189][T17077] ? io_schedule_timeout+0x180/0x180 [ 2195.610525][T17077] mem_cgroup_out_of_memory+0x206/0x270 [ 2195.616103][T17077] ? mem_cgroup_margin+0x130/0x130 [ 2195.621267][T17077] memory_max_write+0x263/0x3c0 [ 2195.626240][T17077] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2195.632439][T17077] ? lock_release+0x720/0x720 [ 2195.637148][T17077] cgroup_file_write+0x1de/0x760 [ 2195.642118][T17077] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2195.648207][T17077] ? kill_css+0x370/0x370 [ 2195.652622][T17077] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2195.658889][T17077] ? kill_css+0x370/0x370 [ 2195.663225][T17077] kernfs_fop_write_iter+0x3f8/0x610 [ 2195.668528][T17077] new_sync_write+0x431/0x660 [ 2195.673220][T17077] ? new_sync_read+0x6e0/0x6e0 [ 2195.677996][T17077] ? lock_release+0x720/0x720 [ 2195.682699][T17077] vfs_write+0x7cd/0xae0 [ 2195.686956][T17077] ksys_write+0x12d/0x250 [ 2195.691288][T17077] ? __ia32_sys_read+0xb0/0xb0 [ 2195.696060][T17077] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 2195.702827][T17077] __do_fast_syscall_32+0x65/0xf0 [ 2195.707880][T17077] do_fast_syscall_32+0x2f/0x70 [ 2195.712745][T17077] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2195.719074][T17077] RIP: 0023:0xf6f60549 [ 2195.723139][T17077] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2195.742783][T17077] RSP: 002b:00000000f595a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2195.751214][T17077] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080 20:27:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/147, 0x93}], 0x1) [ 2195.759196][T17077] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2195.767177][T17077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2195.775157][T17077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2195.783219][T17077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2195.791325][T17077] [ 2195.803778][T17077] memory: usage 576kB, limit 0kB, failcnt 70 [ 2195.819536][T17077] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2195.851350][T17077] Memory cgroup stats for /syz0: [ 2195.851825][T17077] anon 0 [ 2195.851825][T17077] file 155648 [ 2195.851825][T17077] kernel_stack 0 [ 2195.851825][T17077] pagetables 0 [ 2195.851825][T17077] percpu 0 [ 2195.851825][T17077] sock 0 [ 2195.851825][T17077] vmalloc 0 [ 2195.851825][T17077] shmem 155648 [ 2195.851825][T17077] file_mapped 122880 [ 2195.851825][T17077] file_dirty 0 [ 2195.851825][T17077] file_writeback 0 [ 2195.851825][T17077] swapcached 0 [ 2195.851825][T17077] anon_thp 0 [ 2195.851825][T17077] file_thp 0 [ 2195.851825][T17077] shmem_thp 0 [ 2195.851825][T17077] inactive_anon 4096 [ 2195.851825][T17077] active_anon 151552 [ 2195.851825][T17077] inactive_file 0 20:27:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) [ 2195.851825][T17077] active_file 0 [ 2195.851825][T17077] unevictable 0 [ 2195.851825][T17077] slab_reclaimable 7464 [ 2195.851825][T17077] slab_unreclaimable 426616 [ 2195.851825][T17077] slab 434080 [ 2195.851825][T17077] workingset_refault_anon 0 [ 2195.851825][T17077] workingset_refault_file 0 [ 2195.851825][T17077] workingset_activate_anon 0 20:27:01 executing program 3: syz_emit_ethernet(0xc2, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f34df6", 0x8c, 0x2f, 0x0, @private2, @local, {[@srh={0x33, 0x8, 0x4, 0x4, 0x0, 0x0, 0x9, [@remote, @remote, @private0, @private0]}]}}}}}, 0x0) [ 2196.362341][T17077] Out of memory and no killable processes... [ 2198.122669][T17136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2198.143055][T17136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2198.151519][T17136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2198.162458][T17136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2198.182793][T17136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2198.190301][T17136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2198.339463][T17142] chnl_net:caif_netlink_parms(): no params data found [ 2198.454206][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.472281][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.488604][T17142] device bridge_slave_0 entered promiscuous mode [ 2198.505783][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2198.522365][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.542292][T17142] device bridge_slave_1 entered promiscuous mode [ 2198.607875][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2198.635314][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2198.695520][T17142] team0: Port device team_slave_0 added [ 2198.706040][T17142] team0: Port device team_slave_1 added [ 2198.735233][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2198.742449][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2198.769242][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2198.782632][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2198.789607][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2198.815938][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2198.897675][T17142] device hsr_slave_0 entered promiscuous mode [ 2198.913340][T17142] device hsr_slave_1 entered promiscuous mode [ 2199.116682][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.124290][T17142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.133101][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.140230][T17142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.265544][T17142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2199.285730][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2199.294785][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.305614][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.321710][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2199.351373][T17142] 8021q: adding VLAN 0 to HW filter on device team0 [ 2199.379588][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2199.390127][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2199.412878][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.419993][T16660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.474298][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2199.484640][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2199.494363][T16659] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.501497][T16659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.522714][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2199.531777][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2199.589581][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2199.607419][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2199.623214][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2199.642665][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2199.651383][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2199.682995][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2199.691598][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2199.729170][T17142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2199.745082][T17142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2199.755690][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2199.765705][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2199.788472][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2199.797953][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2199.809723][T17142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2199.845871][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2199.864090][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2199.906719][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2199.923490][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2199.947847][T17142] device veth0_vlan entered promiscuous mode [ 2199.959052][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2199.968082][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2199.981662][T17142] device veth1_vlan entered promiscuous mode [ 2200.009329][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2200.018790][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2200.027864][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2200.036982][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2200.055526][T17142] device veth0_macvtap entered promiscuous mode [ 2200.069394][T17142] device veth1_macvtap entered promiscuous mode [ 2200.087685][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2200.100840][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.111592][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2200.132858][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.143029][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2200.153791][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.164524][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2200.176828][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.187116][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2200.200560][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.218953][T17142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2200.241598][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2200.261875][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2200.270635][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2200.280606][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2200.292857][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2200.303574][T16825] Bluetooth: hci0: command 0x0409 tx timeout [ 2200.314616][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.325374][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2200.336228][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.346543][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2200.357276][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.367918][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2200.378722][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.389260][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2200.401115][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2200.413784][T17142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2200.424972][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2200.434907][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2200.579732][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2200.605606][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2200.631477][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2200.647315][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2200.672521][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2200.694120][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2202.332905][T14459] Bluetooth: hci0: command 0x041b tx timeout [ 2204.412227][T14459] Bluetooth: hci0: command 0x040f tx timeout [ 2206.493666][T14459] Bluetooth: hci0: command 0x0419 tx timeout 20:27:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 20:27:11 executing program 3: syz_emit_ethernet(0xc2, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f34df6", 0x8c, 0x2f, 0x0, @private2, @local, {[@srh={0x33, 0x8, 0x4, 0x4, 0x0, 0x0, 0x9, [@remote, @remote, @private0, @private0]}]}}}}}, 0x0) 20:27:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:11 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 20:27:11 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 20:27:11 executing program 3: syz_emit_ethernet(0xc2, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f34df6", 0x8c, 0x2f, 0x0, @private2, @local, {[@srh={0x33, 0x8, 0x4, 0x4, 0x0, 0x0, 0x9, [@remote, @remote, @private0, @private0]}]}}}}}, 0x0) [ 2206.810014][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:27:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 20:27:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 20:27:12 executing program 3: syz_emit_ethernet(0xc2, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f34df6", 0x8c, 0x2f, 0x0, @private2, @local, {[@srh={0x33, 0x8, 0x4, 0x4, 0x0, 0x0, 0x9, [@remote, @remote, @private0, @private0]}]}}}}}, 0x0) [ 2206.963763][T17264] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2207.032670][T17264] CPU: 1 PID: 17264 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 2207.043221][T17264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2207.053467][T17264] Call Trace: [ 2207.056776][T17264] [ 2207.059712][T17264] dump_stack_lvl+0xcd/0x134 [ 2207.064324][T17264] dump_header+0x10b/0x7f9 [ 2207.068774][T17264] oom_kill_process.cold+0x10/0x15 [ 2207.073911][T17264] out_of_memory+0x358/0x14b0 [ 2207.078620][T17264] ? oom_killer_disable+0x270/0x270 [ 2207.083833][T17264] ? find_held_lock+0x2d/0x110 [ 2207.088627][T17264] mem_cgroup_out_of_memory+0x206/0x270 [ 2207.094190][T17264] ? mem_cgroup_margin+0x130/0x130 [ 2207.099325][T17264] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2207.105168][T17264] memory_max_write+0x263/0x3c0 [ 2207.110049][T17264] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2207.116138][T17264] ? lock_release+0x720/0x720 [ 2207.120837][T17264] cgroup_file_write+0x1de/0x760 [ 2207.125791][T17264] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2207.131869][T17264] ? kill_css+0x370/0x370 [ 2207.136187][T17264] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2207.142471][T17264] ? kill_css+0x370/0x370 [ 2207.146786][T17264] kernfs_fop_write_iter+0x3f8/0x610 [ 2207.152074][T17264] new_sync_write+0x431/0x660 [ 2207.156744][T17264] ? new_sync_read+0x6e0/0x6e0 [ 2207.161498][T17264] ? lock_release+0x720/0x720 [ 2207.166178][T17264] vfs_write+0x7cd/0xae0 [ 2207.170418][T17264] ksys_write+0x12d/0x250 [ 2207.174739][T17264] ? __ia32_sys_read+0xb0/0xb0 [ 2207.179492][T17264] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 2207.186269][T17264] __do_fast_syscall_32+0x65/0xf0 [ 2207.191279][T17264] do_fast_syscall_32+0x2f/0x70 [ 2207.196114][T17264] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2207.202432][T17264] RIP: 0023:0xf6f60549 [ 2207.206482][T17264] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 20:27:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0xc0045006, &(0x7f00000003c0)) [ 2207.226169][T17264] RSP: 002b:00000000f595a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2207.234572][T17264] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080 [ 2207.242524][T17264] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2207.250489][T17264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2207.258451][T17264] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2207.266412][T17264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2207.274382][T17264] [ 2207.630698][T17264] memory: usage 420kB, limit 0kB, failcnt 89 [ 2207.640067][T17264] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2207.691322][T17264] Memory cgroup stats for /syz0: [ 2207.691474][T17264] anon 45056 [ 2207.691474][T17264] file 155648 [ 2207.691474][T17264] kernel_stack 0 [ 2207.691474][T17264] pagetables 8192 [ 2207.691474][T17264] percpu 0 [ 2207.691474][T17264] sock 0 [ 2207.691474][T17264] vmalloc 0 [ 2207.691474][T17264] shmem 155648 [ 2207.691474][T17264] file_mapped 122880 [ 2207.691474][T17264] file_dirty 0 [ 2207.691474][T17264] file_writeback 0 [ 2207.691474][T17264] swapcached 0 [ 2207.691474][T17264] anon_thp 0 [ 2207.691474][T17264] file_thp 0 [ 2207.691474][T17264] shmem_thp 0 [ 2207.691474][T17264] inactive_anon 49152 [ 2207.691474][T17264] active_anon 151552 [ 2207.691474][T17264] inactive_file 0 [ 2207.691474][T17264] active_file 0 [ 2207.691474][T17264] unevictable 0 [ 2207.691474][T17264] slab_reclaimable 44848 [ 2207.691474][T17264] slab_unreclaimable 172152 [ 2207.691474][T17264] slab 217000 [ 2207.691474][T17264] workingset_refault_anon 0 [ 2207.691474][T17264] workingset_refault_file 0 [ 2207.691474][T17264] workingset_activate_anon 0 [ 2207.958410][T17264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17142,uid=0 [ 2207.975376][T17264] Memory cgroup out of memory: Killed process 17142 (syz-executor.0) total-vm:56456kB, anon-rss:320kB, file-rss:15168kB, shmem-rss:64kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2208.002761][ T27] oom_reaper: reaped process 17142 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:64kB [ 2208.807371][ T6367] device hsr_slave_0 left promiscuous mode [ 2208.815228][ T6367] device hsr_slave_1 left promiscuous mode [ 2208.821600][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2208.829538][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2208.839525][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2208.848362][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2208.858310][ T6367] device bridge_slave_1 left promiscuous mode [ 2208.865020][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.876761][ T6367] device bridge_slave_0 left promiscuous mode [ 2208.883397][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.906449][ T6367] device veth1_macvtap left promiscuous mode [ 2208.914494][ T6367] device veth0_macvtap left promiscuous mode [ 2208.921628][ T6367] device veth1_vlan left promiscuous mode [ 2208.927844][ T6367] device veth0_vlan left promiscuous mode [ 2209.140333][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 2209.157875][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 2209.174511][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2209.194978][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2209.274200][ T6367] bond0 (unregistering): Released all slaves [ 2217.225178][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:27:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:22 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100000000faff00000010000000", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000000800010010"], 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924926c0, 0x0) 20:27:22 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0xc0045006, &(0x7f00000003c0)) 20:27:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 20:27:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:22 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0xc0045006, &(0x7f00000003c0)) 20:27:22 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100000000faff00000010000000", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000000800010010"], 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924926c0, 0x0) [ 2217.837848][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2217.842036][T17290] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2217.935614][T17290] CPU: 1 PID: 17290 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 2217.946161][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2217.956502][T17290] Call Trace: [ 2217.959767][T17290] [ 2217.962686][T17290] dump_stack_lvl+0xcd/0x134 [ 2217.967275][T17290] dump_header+0x10b/0x7f9 [ 2217.971691][T17290] out_of_memory.cold+0x5e/0x16c [ 2217.976641][T17290] ? oom_killer_disable+0x270/0x270 [ 2217.981849][T17290] ? io_schedule_timeout+0x180/0x180 [ 2217.987129][T17290] mem_cgroup_out_of_memory+0x206/0x270 [ 2217.992668][T17290] ? mem_cgroup_margin+0x130/0x130 [ 2217.997780][T17290] memory_max_write+0x263/0x3c0 [ 2218.002622][T17290] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2218.008716][T17290] ? lock_release+0x720/0x720 [ 2218.013415][T17290] cgroup_file_write+0x1de/0x760 [ 2218.018346][T17290] ? mem_cgroup_force_empty_write+0x150/0x150 [ 2218.024407][T17290] ? kill_css+0x370/0x370 [ 2218.028752][T17290] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2218.035001][T17290] ? kill_css+0x370/0x370 [ 2218.039327][T17290] kernfs_fop_write_iter+0x3f8/0x610 [ 2218.044633][T17290] new_sync_write+0x431/0x660 [ 2218.049304][T17290] ? new_sync_read+0x6e0/0x6e0 [ 2218.054076][T17290] ? lock_release+0x720/0x720 [ 2218.058752][T17290] vfs_write+0x7cd/0xae0 [ 2218.062984][T17290] ksys_write+0x12d/0x250 [ 2218.067301][T17290] ? __ia32_sys_read+0xb0/0xb0 [ 2218.072056][T17290] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 2218.078643][T17290] __do_fast_syscall_32+0x65/0xf0 [ 2218.083680][T17290] do_fast_syscall_32+0x2f/0x70 [ 2218.088547][T17290] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2218.094877][T17290] RIP: 0023:0xf6f60549 [ 2218.098934][T17290] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2218.119017][T17290] RSP: 002b:00000000f595a5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2218.127542][T17290] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080 [ 2218.135533][T17290] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2218.143496][T17290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2218.151456][T17290] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2218.159428][T17290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2218.167397][T17290] 20:27:23 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100000000faff00000010000000", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000000800010010"], 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924926c0, 0x0) [ 2218.212801][T17290] memory: usage 364kB, limit 0kB, failcnt 106 [ 2218.233566][T17290] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2218.268042][T17290] Memory cgroup stats for /syz0: [ 2218.268207][T17290] anon 0 [ 2218.268207][T17290] file 155648 [ 2218.268207][T17290] kernel_stack 0 [ 2218.268207][T17290] pagetables 0 [ 2218.268207][T17290] percpu 0 [ 2218.268207][T17290] sock 0 [ 2218.268207][T17290] vmalloc 0 [ 2218.268207][T17290] shmem 155648 [ 2218.268207][T17290] file_mapped 122880 [ 2218.268207][T17290] file_dirty 0 [ 2218.268207][T17290] file_writeback 0 [ 2218.268207][T17290] swapcached 0 [ 2218.268207][T17290] anon_thp 0 [ 2218.268207][T17290] file_thp 0 20:27:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0xc0045006, &(0x7f00000003c0)) [ 2218.268207][T17290] shmem_thp 0 [ 2218.268207][T17290] inactive_anon 4096 [ 2218.268207][T17290] active_anon 151552 [ 2218.268207][T17290] inactive_file 0 [ 2218.268207][T17290] active_file 0 [ 2218.268207][T17290] unevictable 0 [ 2218.268207][T17290] slab_reclaimable 44848 [ 2218.268207][T17290] slab_unreclaimable 172152 [ 2218.268207][T17290] slab 217000 [ 2218.268207][T17290] workingset_refault_anon 0 [ 2218.268207][T17290] workingset_refault_file 0 [ 2218.268207][T17290] workingset_activate_anon 0 20:27:23 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100000000faff00000010000000", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000000800010010"], 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924926c0, 0x0) 20:27:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) [ 2218.506746][T17290] Out of memory and no killable processes... [ 2220.436701][T17136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2220.447292][T17136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2220.455832][T17136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2220.463713][T17136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2220.471217][T17136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2220.479408][T17136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2220.606997][T17309] chnl_net:caif_netlink_parms(): no params data found [ 2220.664600][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.671909][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.680654][T17309] device bridge_slave_0 entered promiscuous mode [ 2220.689912][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.697492][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.706353][T17309] device bridge_slave_1 entered promiscuous mode [ 2220.740248][T17309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.751682][T17309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.783942][T17309] team0: Port device team_slave_0 added [ 2220.796696][T17309] team0: Port device team_slave_1 added [ 2220.820985][T17309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2220.831548][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2220.858595][T17309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2220.870605][T17309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2220.877759][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2220.904133][T17309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2220.940259][T17309] device hsr_slave_0 entered promiscuous mode [ 2220.947319][T17309] device hsr_slave_1 entered promiscuous mode [ 2221.033983][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.041159][T17309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2221.048879][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2221.056525][T17309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2221.122797][T17309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2221.138657][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2221.148154][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2221.157072][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 2221.166257][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2221.184078][T17309] 8021q: adding VLAN 0 to HW filter on device team0 [ 2221.197036][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2221.207113][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2221.214698][T16660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2221.233753][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2221.244287][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.251401][T16660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2221.277815][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2221.287746][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2221.296715][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2221.311940][T17309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2221.328908][T17309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2221.337529][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2221.345955][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2221.374055][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2221.381596][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2221.392234][T17309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2221.412328][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2221.434569][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2221.443522][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2221.451256][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2221.454026][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.472703][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.474709][T17309] device veth0_vlan entered promiscuous mode [ 2221.513836][T17309] device veth1_vlan entered promiscuous mode [ 2221.573691][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2221.584285][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2221.603886][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2221.616134][T17309] device veth0_macvtap entered promiscuous mode [ 2221.646031][T17309] device veth1_macvtap entered promiscuous mode [ 2221.666262][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2221.681453][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.692981][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2221.704275][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.715977][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2221.726814][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.737738][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2221.748600][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.759501][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2221.770376][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.783082][T17309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2221.794677][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2221.805471][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2221.817150][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2221.829666][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.840673][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2221.853053][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.864130][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2221.874930][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.885197][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2221.895954][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.908583][T17309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2221.921209][T17309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.933783][T17309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2221.942994][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2221.951826][T16659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2222.064757][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2222.091200][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2222.118246][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2222.135684][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2222.152246][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2222.183995][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2222.294134][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2222.502895][T16659] Bluetooth: hci0: command 0x0409 tx timeout [ 2224.573074][T16660] Bluetooth: hci0: command 0x041b tx timeout [ 2226.652900][T16660] Bluetooth: hci0: command 0x040f tx timeout [ 2228.258898][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2228.732356][T16660] Bluetooth: hci0: command 0x0419 tx timeout 20:27:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 20:27:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x51, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "93517e82e7eca092", "0a401b146109203c5d8cdad48116dc0c", "875ef58d", "f46e2d20de81f09a"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 20:27:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) [ 2228.914134][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2228.926683][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2228.935880][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:27:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) [ 2229.414682][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2237.315762][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:27:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 20:27:43 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae88, &(0x7f0000000040)=""/106) 20:27:43 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:27:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 20:27:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:43 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae88, &(0x7f0000000040)=""/106) 20:27:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) [ 2237.990845][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:27:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 20:27:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65da, 0x4) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x121) close(r0) 20:27:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:27:43 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae88, &(0x7f0000000040)=""/106) [ 2238.129360][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:27:43 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:27:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:27:43 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae88, &(0x7f0000000040)=""/106) 20:27:43 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:27:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 20:27:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x70000, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 20:27:55 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:27:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:27:55 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:27:55 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:27:55 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:27:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:27:55 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:27:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x70000, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 20:27:55 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:27:55 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:28:10 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:28:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 20:28:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x70000, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 20:28:10 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:28:10 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:28:10 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:28:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:28:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x70000, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 20:28:10 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:28:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:28:10 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 20:28:10 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0xff}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 20:28:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:28:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 20:28:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 20:28:16 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0xff}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 20:28:16 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:28:16 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="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", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:28:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:28:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 20:28:16 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0xff}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 20:28:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 20:28:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 20:28:16 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0xff}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 20:28:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 2282.895458][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.901797][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:28:31 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="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", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:28:31 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="93803db9ffbdc799bf0b103703fb6de75a4b989f44b2ae22d72808f4d7ab160c04d9c1b9769c7e57217790e7ae577797ae4d881366740a92e284835f6348cea5bc980df6aec600ec7fdd2672dba544fecaff9f8f47e12e06614dd5b4d643e66798ef659ac8b1b329714bf55e32e21a7bef389a1c23fc23578af0d3b556ba62b2084e6ca21a2ac7134d48ee329fc08df9b198fe0be31d612af73852efd9fa893d28bba6f25431f9e5aa291c74761eb1a8b54a1c6bb7d3339a3fcdf3c7f9549d7a57d737cb1b5abcc6da329279dcb61592d737a4c9e6fc72c182af02b832aab7ebddb309356ad712d48262c517a38b799a4abd2f7aa4c0f8749c600196e894ba5d9e9f33582de9aad7d084d2e00e62ab35850b11aaecd43d2c1bc9d091e110a039566e76ea5260b024e883c48cd303a6debc82c3f8594c252d261b2ae94369e0ed8f3b9f871a3bdd59aefb1be857c1ee6cbd6f10b5b077facd16a7c1a2f43433e052bd9e7ca9caa32c0a0d654bfdc69e4d81e27dfe421c28ce5cf880fde58fb825fa7b515bfbedb9f8d1b93060cf356039e089662db7a38e58442b40c73c13772797a07143936cf06da8abd1eedb44742ddce7db4468a281a87a9d277eda792eed78cf584f25e451c35365e85bca0c6a4a1a25fee452512c527357b19b5934ecf495d3e19f850527365b1bcc4b984da443e5319f0b8deb5347609f301b03e8a69daa0b62950889260f5ffced721086f68e05a24500d464b9e541dfa56ea2d284be4a23b81649c8e61cda5a1a8d3569fcba977f48bcf54fd68d63ab967b1df38e2bc144c60b3d8b8105af6a137e8b9103bcd2a495c231b08a7555b0366deadf1981edfb2910727711b9d826dec49e611b8d2beb5de32e57ec7b5412013cf614d3a327429bf49bc1744946ede02f555c276773828eb7cf05809b7d541894a89ddb1dd2ee8015f4b88f0d366a9d1c6c81114127362fb824c27251bb7d5fa832c1ac0c1c4182a3f51cccf2f370fc5a61f5f41e2612ec7c4b483bdcb4271a3f152cbf729886c8180e1964799b6289515ce62e9d8c94dec5bde6301e6ead0ba646228acdfe8c24f33c86d0fe707d14a739b5905be8c77619683b2365dd53c3e6c7ad004d653c6d615a912a9418d3598124b7645cf5eeed9e12bb8969cbdc124d38ec54d96da0b4b294082459f028c23a07968dd8e8f1bf6acb36ff1d65b001fc1345efa25b05fdc2acdb885afa279045cf95159e8cfea615e4b0a42c83a9b8c0d43f9a72fca1d5b043df7cd4fe189fd43f9df29025ea3bf541c0ee9a6571d62398354ab6a2120aa9f3ad5e2e97983c7055960a998ce3a3318dee85a5b4f70d9250a06164ffc5b2d882c8ee7d5f20c95d6ed00f2def9a40c4c01eeb28eb746ee1ea1a1aef99776de86905410d95e587ea757666a0fcffb47fbb9c72a9a5db29c564d30ec53efdd87232ae54d8ca409ce6ebba4f66b4d9d18c95bd2f4b9b98fcef2067a2082b40179cfdbaff77cac6af8df331f71b736421c0b286e39debca6fb2b511abfa2fd78e72a439f2e4849828aa9add2f3a0b0dac429ee75084f92143c522ad3338e44a86c7f3f2465f195323118209d4f444a106d12666c1c93a9f96331754545fc24515efddcbcc7e869e36ed29d1f932f1445ecb001a6cdf7f9594bcc8cec8b3d4ebf57880c2c69d0579ef62b59cf21c5b37d53b5a7d23b4decd0627506e17f894b5f316a99ea75ecc93bcabf36c2e8d4f5da8e0306f44438f605dbf71427436708a8fdb8534673115cca4c33e11818e71282f3dede9a0be61ae7930885093388e7c14a8384baaa81343f89646761535fb6eb6fd34a5ff0f562ae8cea797c76ca8367dc7a861b023bb97f25de41585c81a18bd63e53996b49ee405c4bab3a490a23c7d30d917007eff741bcc99e3af388f0e9d4c59d45860928f3e6ecd25aa2ec62f01e8c96fe5c1020dc87d7ab2091b005b64ef02165723b2dd3aeabf83573a31b202606251fada9d9321bbeb7cb0494dafe427ab6734985b98eb6fd97daa67d3a6f7f2d324735d0841cf9b5355a7b1a59356c1af80e02c4e067503a8a43f4d2258fa8117e3d81ddc6f13d5bc650da4f73acbd7c64dca2a07845491ea8ede2a2f250decbfad43425c2f359c5d64d29921ab80d09c74cfcca2ecef3cf889c823a07cd223ea4c1837579e1fcfc692e9201c32aea197bdf15ea020d54936a8da15faad4739c522225e301f88579fb7c5b607e8fb3ee5948a9c982a79dd78ff051f408800266826462c9926cf7a3b2153a08f56bb39cd4cc0a65a293a7fa0a7a9ed366780cffaadad23a12e7629291c8b5f0898bc96a6f8ba8159fefce9e41dbb345c17f761aa018e21e9616b2e1bb79eca9e5272b4e745eee5a40d46d6cc9777e021dc2288619d4cb9308343854c08b7b5747fe895da23a96c7e4b07f249878e8bfc2b5a49b3f5dffa7f7118f70c7c9883ef292921e7d8ad12bd72a32a2a11c4d0e90c2aa9a393cb51c83e727e62e4c1d06f8df00e072c8cc3d8f1ecfd6b2618a685172401936212d545924fa4d9eaa5245b76b72da10e00f7055dc56f3ede8b7dd60f48573f3e1cbdf25cccc9b564352a72a38e77a80965b2bf8ddffa9913ee354096c481724cc5a0683cedb7eff98d774870c5ed1009e5a8db125657cbcf5ae11da4fff38477f5d4ea52bf81f6b6dda45bec64b475f9bd034d89fd1dc1f0893495855f65f8571b76184c5ce0ff6ae6d64c197adc9b41b52c06ef2626e1c04841061c824ccce8c4ee5ac0dadfba7ccf06eebe287c5db9fede486ff210abf6367ee57568b104bfe5ac7a47c982a452a38ee7601b5d600b1892d7ba5cd77b64b7c936f1898c72e2b34aa5de2d8ea7db5a127fcd33d511d72b26eab4ad4bfb0d4b95766680c3337a899505a88d3f5312d7bd3adbd9d381748e60dbba95f8491838c87c55f8ce10792bdc67183382d44b8382b8a2e70fa40a69244246edb658948e644f80904d24ec4cc1e2f42a3d5e6bad0fe0c16760f54218678d5779e540b71d2ef31a93b03a29403d47fae11deab4ef7613cb4696b175d595f4bf9bf529d0cbd851a2252ad79858ed23d5e09cd586a6901d91c344f983f3b3a09129d4df0489275e4c40e303e26d4f52d66a62473460d898c25550988d8e1e1895407a876369056e6f8e232a0bdc9f0dbf991b2d37553e16a10c0fa9bf413eaa7731ad9f5f87ffa5dec2c55fee2c02f442e8788e1a2e561ca8a671d261c75858ebb4fa251ebb7befa25695735d915ca92d3afa54b3c3c0145efc5be7dde708e10c9ad6c6e29ed3e995258cc8616e0ed2f4b2a275e19c27f1a677dfa7bd8be84f0a435d93991c6d8ee24c8aa26f5b3263b4c44f9b1a64fdf13f8f977ab1b025b3cef295637612322705c2fbc308175efaddfc52d0e6db78a4aa4834be3b21469a0d6a20fc7532c5855c2286d5ce32c8f1c08951595efa3e7bdf1ace343d4b177a03cf79b0c3bce727e1123691be245bef8d4918ce6d7bd297243a51ece88a4962a92d3631a1167d7c98", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:28:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 20:28:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 20:28:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:28:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0x3c, 0x0) 20:28:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 20:28:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) [ 2286.210341][T17488] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. 20:28:31 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="93803db9ffbdc799bf0b103703fb6de75a4b989f44b2ae22d72808f4d7ab160c04d9c1b9769c7e57217790e7ae577797ae4d881366740a92e284835f6348cea5bc980df6aec600ec7fdd2672dba544fecaff9f8f47e12e06614dd5b4d643e66798ef659ac8b1b329714bf55e32e21a7bef389a1c23fc23578af0d3b556ba62b2084e6ca21a2ac7134d48ee329fc08df9b198fe0be31d612af73852efd9fa893d28bba6f25431f9e5aa291c74761eb1a8b54a1c6bb7d3339a3fcdf3c7f9549d7a57d737cb1b5abcc6da329279dcb61592d737a4c9e6fc72c182af02b832aab7ebddb309356ad712d48262c517a38b799a4abd2f7aa4c0f8749c600196e894ba5d9e9f33582de9aad7d084d2e00e62ab35850b11aaecd43d2c1bc9d091e110a039566e76ea5260b024e883c48cd303a6debc82c3f8594c252d261b2ae94369e0ed8f3b9f871a3bdd59aefb1be857c1ee6cbd6f10b5b077facd16a7c1a2f43433e052bd9e7ca9caa32c0a0d654bfdc69e4d81e27dfe421c28ce5cf880fde58fb825fa7b515bfbedb9f8d1b93060cf356039e089662db7a38e58442b40c73c13772797a07143936cf06da8abd1eedb44742ddce7db4468a281a87a9d277eda792eed78cf584f25e451c35365e85bca0c6a4a1a25fee452512c527357b19b5934ecf495d3e19f850527365b1bcc4b984da443e5319f0b8deb5347609f301b03e8a69daa0b62950889260f5ffced721086f68e05a24500d464b9e541dfa56ea2d284be4a23b81649c8e61cda5a1a8d3569fcba977f48bcf54fd68d63ab967b1df38e2bc144c60b3d8b8105af6a137e8b9103bcd2a495c231b08a7555b0366deadf1981edfb2910727711b9d826dec49e611b8d2beb5de32e57ec7b5412013cf614d3a327429bf49bc1744946ede02f555c276773828eb7cf05809b7d541894a89ddb1dd2ee8015f4b88f0d366a9d1c6c81114127362fb824c27251bb7d5fa832c1ac0c1c4182a3f51cccf2f370fc5a61f5f41e2612ec7c4b483bdcb4271a3f152cbf729886c8180e1964799b6289515ce62e9d8c94dec5bde6301e6ead0ba646228acdfe8c24f33c86d0fe707d14a739b5905be8c77619683b2365dd53c3e6c7ad004d653c6d615a912a9418d3598124b7645cf5eeed9e12bb8969cbdc124d38ec54d96da0b4b294082459f028c23a07968dd8e8f1bf6acb36ff1d65b001fc1345efa25b05fdc2acdb885afa279045cf95159e8cfea615e4b0a42c83a9b8c0d43f9a72fca1d5b043df7cd4fe189fd43f9df29025ea3bf541c0ee9a6571d62398354ab6a2120aa9f3ad5e2e97983c7055960a998ce3a3318dee85a5b4f70d9250a06164ffc5b2d882c8ee7d5f20c95d6ed00f2def9a40c4c01eeb28eb746ee1ea1a1aef99776de86905410d95e587ea757666a0fcffb47fbb9c72a9a5db29c564d30ec53efdd87232ae54d8ca409ce6ebba4f66b4d9d18c95bd2f4b9b98fcef2067a2082b40179cfdbaff77cac6af8df331f71b736421c0b286e39debca6fb2b511abfa2fd78e72a439f2e4849828aa9add2f3a0b0dac429ee75084f92143c522ad3338e44a86c7f3f2465f195323118209d4f444a106d12666c1c93a9f96331754545fc24515efddcbcc7e869e36ed29d1f932f1445ecb001a6cdf7f9594bcc8cec8b3d4ebf57880c2c69d0579ef62b59cf21c5b37d53b5a7d23b4decd0627506e17f894b5f316a99ea75ecc93bcabf36c2e8d4f5da8e0306f44438f605dbf71427436708a8fdb8534673115cca4c33e11818e71282f3dede9a0be61ae7930885093388e7c14a8384baaa81343f89646761535fb6eb6fd34a5ff0f562ae8cea797c76ca8367dc7a861b023bb97f25de41585c81a18bd63e53996b49ee405c4bab3a490a23c7d30d917007eff741bcc99e3af388f0e9d4c59d45860928f3e6ecd25aa2ec62f01e8c96fe5c1020dc87d7ab2091b005b64ef02165723b2dd3aeabf83573a31b202606251fada9d9321bbeb7cb0494dafe427ab6734985b98eb6fd97daa67d3a6f7f2d324735d0841cf9b5355a7b1a59356c1af80e02c4e067503a8a43f4d2258fa8117e3d81ddc6f13d5bc650da4f73acbd7c64dca2a07845491ea8ede2a2f250decbfad43425c2f359c5d64d29921ab80d09c74cfcca2ecef3cf889c823a07cd223ea4c1837579e1fcfc692e9201c32aea197bdf15ea020d54936a8da15faad4739c522225e301f88579fb7c5b607e8fb3ee5948a9c982a79dd78ff051f408800266826462c9926cf7a3b2153a08f56bb39cd4cc0a65a293a7fa0a7a9ed366780cffaadad23a12e7629291c8b5f0898bc96a6f8ba8159fefce9e41dbb345c17f761aa018e21e9616b2e1bb79eca9e5272b4e745eee5a40d46d6cc9777e021dc2288619d4cb9308343854c08b7b5747fe895da23a96c7e4b07f249878e8bfc2b5a49b3f5dffa7f7118f70c7c9883ef292921e7d8ad12bd72a32a2a11c4d0e90c2aa9a393cb51c83e727e62e4c1d06f8df00e072c8cc3d8f1ecfd6b2618a685172401936212d545924fa4d9eaa5245b76b72da10e00f7055dc56f3ede8b7dd60f48573f3e1cbdf25cccc9b564352a72a38e77a80965b2bf8ddffa9913ee354096c481724cc5a0683cedb7eff98d774870c5ed1009e5a8db125657cbcf5ae11da4fff38477f5d4ea52bf81f6b6dda45bec64b475f9bd034d89fd1dc1f0893495855f65f8571b76184c5ce0ff6ae6d64c197adc9b41b52c06ef2626e1c04841061c824ccce8c4ee5ac0dadfba7ccf06eebe287c5db9fede486ff210abf6367ee57568b104bfe5ac7a47c982a452a38ee7601b5d600b1892d7ba5cd77b64b7c936f1898c72e2b34aa5de2d8ea7db5a127fcd33d511d72b26eab4ad4bfb0d4b95766680c3337a899505a88d3f5312d7bd3adbd9d381748e60dbba95f8491838c87c55f8ce10792bdc67183382d44b8382b8a2e70fa40a69244246edb658948e644f80904d24ec4cc1e2f42a3d5e6bad0fe0c16760f54218678d5779e540b71d2ef31a93b03a29403d47fae11deab4ef7613cb4696b175d595f4bf9bf529d0cbd851a2252ad79858ed23d5e09cd586a6901d91c344f983f3b3a09129d4df0489275e4c40e303e26d4f52d66a62473460d898c25550988d8e1e1895407a876369056e6f8e232a0bdc9f0dbf991b2d37553e16a10c0fa9bf413eaa7731ad9f5f87ffa5dec2c55fee2c02f442e8788e1a2e561ca8a671d261c75858ebb4fa251ebb7befa25695735d915ca92d3afa54b3c3c0145efc5be7dde708e10c9ad6c6e29ed3e995258cc8616e0ed2f4b2a275e19c27f1a677dfa7bd8be84f0a435d93991c6d8ee24c8aa26f5b3263b4c44f9b1a64fdf13f8f977ab1b025b3cef295637612322705c2fbc308175efaddfc52d0e6db78a4aa4834be3b21469a0d6a20fc7532c5855c2286d5ce32c8f1c08951595efa3e7bdf1ace343d4b177a03cf79b0c3bce727e1123691be245bef8d4918ce6d7bd297243a51ece88a4962a92d3631a1167d7c98", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:28:31 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="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", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 2286.394434][T17492] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. 20:28:31 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:31 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="93803db9ffbdc799bf0b103703fb6de75a4b989f44b2ae22d72808f4d7ab160c04d9c1b9769c7e57217790e7ae577797ae4d881366740a92e284835f6348cea5bc980df6aec600ec7fdd2672dba544fecaff9f8f47e12e06614dd5b4d643e66798ef659ac8b1b329714bf55e32e21a7bef389a1c23fc23578af0d3b556ba62b2084e6ca21a2ac7134d48ee329fc08df9b198fe0be31d612af73852efd9fa893d28bba6f25431f9e5aa291c74761eb1a8b54a1c6bb7d3339a3fcdf3c7f9549d7a57d737cb1b5abcc6da329279dcb61592d737a4c9e6fc72c182af02b832aab7ebddb309356ad712d48262c517a38b799a4abd2f7aa4c0f8749c600196e894ba5d9e9f33582de9aad7d084d2e00e62ab35850b11aaecd43d2c1bc9d091e110a039566e76ea5260b024e883c48cd303a6debc82c3f8594c252d261b2ae94369e0ed8f3b9f871a3bdd59aefb1be857c1ee6cbd6f10b5b077facd16a7c1a2f43433e052bd9e7ca9caa32c0a0d654bfdc69e4d81e27dfe421c28ce5cf880fde58fb825fa7b515bfbedb9f8d1b93060cf356039e089662db7a38e58442b40c73c13772797a07143936cf06da8abd1eedb44742ddce7db4468a281a87a9d277eda792eed78cf584f25e451c35365e85bca0c6a4a1a25fee452512c527357b19b5934ecf495d3e19f850527365b1bcc4b984da443e5319f0b8deb5347609f301b03e8a69daa0b62950889260f5ffced721086f68e05a24500d464b9e541dfa56ea2d284be4a23b81649c8e61cda5a1a8d3569fcba977f48bcf54fd68d63ab967b1df38e2bc144c60b3d8b8105af6a137e8b9103bcd2a495c231b08a7555b0366deadf1981edfb2910727711b9d826dec49e611b8d2beb5de32e57ec7b5412013cf614d3a327429bf49bc1744946ede02f555c276773828eb7cf05809b7d541894a89ddb1dd2ee8015f4b88f0d366a9d1c6c81114127362fb824c27251bb7d5fa832c1ac0c1c4182a3f51cccf2f370fc5a61f5f41e2612ec7c4b483bdcb4271a3f152cbf729886c8180e1964799b6289515ce62e9d8c94dec5bde6301e6ead0ba646228acdfe8c24f33c86d0fe707d14a739b5905be8c77619683b2365dd53c3e6c7ad004d653c6d615a912a9418d3598124b7645cf5eeed9e12bb8969cbdc124d38ec54d96da0b4b294082459f028c23a07968dd8e8f1bf6acb36ff1d65b001fc1345efa25b05fdc2acdb885afa279045cf95159e8cfea615e4b0a42c83a9b8c0d43f9a72fca1d5b043df7cd4fe189fd43f9df29025ea3bf541c0ee9a6571d62398354ab6a2120aa9f3ad5e2e97983c7055960a998ce3a3318dee85a5b4f70d9250a06164ffc5b2d882c8ee7d5f20c95d6ed00f2def9a40c4c01eeb28eb746ee1ea1a1aef99776de86905410d95e587ea757666a0fcffb47fbb9c72a9a5db29c564d30ec53efdd87232ae54d8ca409ce6ebba4f66b4d9d18c95bd2f4b9b98fcef2067a2082b40179cfdbaff77cac6af8df331f71b736421c0b286e39debca6fb2b511abfa2fd78e72a439f2e4849828aa9add2f3a0b0dac429ee75084f92143c522ad3338e44a86c7f3f2465f195323118209d4f444a106d12666c1c93a9f96331754545fc24515efddcbcc7e869e36ed29d1f932f1445ecb001a6cdf7f9594bcc8cec8b3d4ebf57880c2c69d0579ef62b59cf21c5b37d53b5a7d23b4decd0627506e17f894b5f316a99ea75ecc93bcabf36c2e8d4f5da8e0306f44438f605dbf71427436708a8fdb8534673115cca4c33e11818e71282f3dede9a0be61ae7930885093388e7c14a8384baaa81343f89646761535fb6eb6fd34a5ff0f562ae8cea797c76ca8367dc7a861b023bb97f25de41585c81a18bd63e53996b49ee405c4bab3a490a23c7d30d917007eff741bcc99e3af388f0e9d4c59d45860928f3e6ecd25aa2ec62f01e8c96fe5c1020dc87d7ab2091b005b64ef02165723b2dd3aeabf83573a31b202606251fada9d9321bbeb7cb0494dafe427ab6734985b98eb6fd97daa67d3a6f7f2d324735d0841cf9b5355a7b1a59356c1af80e02c4e067503a8a43f4d2258fa8117e3d81ddc6f13d5bc650da4f73acbd7c64dca2a07845491ea8ede2a2f250decbfad43425c2f359c5d64d29921ab80d09c74cfcca2ecef3cf889c823a07cd223ea4c1837579e1fcfc692e9201c32aea197bdf15ea020d54936a8da15faad4739c522225e301f88579fb7c5b607e8fb3ee5948a9c982a79dd78ff051f408800266826462c9926cf7a3b2153a08f56bb39cd4cc0a65a293a7fa0a7a9ed366780cffaadad23a12e7629291c8b5f0898bc96a6f8ba8159fefce9e41dbb345c17f761aa018e21e9616b2e1bb79eca9e5272b4e745eee5a40d46d6cc9777e021dc2288619d4cb9308343854c08b7b5747fe895da23a96c7e4b07f249878e8bfc2b5a49b3f5dffa7f7118f70c7c9883ef292921e7d8ad12bd72a32a2a11c4d0e90c2aa9a393cb51c83e727e62e4c1d06f8df00e072c8cc3d8f1ecfd6b2618a685172401936212d545924fa4d9eaa5245b76b72da10e00f7055dc56f3ede8b7dd60f48573f3e1cbdf25cccc9b564352a72a38e77a80965b2bf8ddffa9913ee354096c481724cc5a0683cedb7eff98d774870c5ed1009e5a8db125657cbcf5ae11da4fff38477f5d4ea52bf81f6b6dda45bec64b475f9bd034d89fd1dc1f0893495855f65f8571b76184c5ce0ff6ae6d64c197adc9b41b52c06ef2626e1c04841061c824ccce8c4ee5ac0dadfba7ccf06eebe287c5db9fede486ff210abf6367ee57568b104bfe5ac7a47c982a452a38ee7601b5d600b1892d7ba5cd77b64b7c936f1898c72e2b34aa5de2d8ea7db5a127fcd33d511d72b26eab4ad4bfb0d4b95766680c3337a899505a88d3f5312d7bd3adbd9d381748e60dbba95f8491838c87c55f8ce10792bdc67183382d44b8382b8a2e70fa40a69244246edb658948e644f80904d24ec4cc1e2f42a3d5e6bad0fe0c16760f54218678d5779e540b71d2ef31a93b03a29403d47fae11deab4ef7613cb4696b175d595f4bf9bf529d0cbd851a2252ad79858ed23d5e09cd586a6901d91c344f983f3b3a09129d4df0489275e4c40e303e26d4f52d66a62473460d898c25550988d8e1e1895407a876369056e6f8e232a0bdc9f0dbf991b2d37553e16a10c0fa9bf413eaa7731ad9f5f87ffa5dec2c55fee2c02f442e8788e1a2e561ca8a671d261c75858ebb4fa251ebb7befa25695735d915ca92d3afa54b3c3c0145efc5be7dde708e10c9ad6c6e29ed3e995258cc8616e0ed2f4b2a275e19c27f1a677dfa7bd8be84f0a435d93991c6d8ee24c8aa26f5b3263b4c44f9b1a64fdf13f8f977ab1b025b3cef295637612322705c2fbc308175efaddfc52d0e6db78a4aa4834be3b21469a0d6a20fc7532c5855c2286d5ce32c8f1c08951595efa3e7bdf1ace343d4b177a03cf79b0c3bce727e1123691be245bef8d4918ce6d7bd297243a51ece88a4962a92d3631a1167d7c98", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 2286.571204][T17499] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 20:28:31 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001680)="93803db9ffbdc799bf0b103703fb6de75a4b989f44b2ae22d72808f4d7ab160c04d9c1b9769c7e57217790e7ae577797ae4d881366740a92e284835f6348cea5bc980df6aec600ec7fdd2672dba544fecaff9f8f47e12e06614dd5b4d643e66798ef659ac8b1b329714bf55e32e21a7bef389a1c23fc23578af0d3b556ba62b2084e6ca21a2ac7134d48ee329fc08df9b198fe0be31d612af73852efd9fa893d28bba6f25431f9e5aa291c74761eb1a8b54a1c6bb7d3339a3fcdf3c7f9549d7a57d737cb1b5abcc6da329279dcb61592d737a4c9e6fc72c182af02b832aab7ebddb309356ad712d48262c517a38b799a4abd2f7aa4c0f8749c600196e894ba5d9e9f33582de9aad7d084d2e00e62ab35850b11aaecd43d2c1bc9d091e110a039566e76ea5260b024e883c48cd303a6debc82c3f8594c252d261b2ae94369e0ed8f3b9f871a3bdd59aefb1be857c1ee6cbd6f10b5b077facd16a7c1a2f43433e052bd9e7ca9caa32c0a0d654bfdc69e4d81e27dfe421c28ce5cf880fde58fb825fa7b515bfbedb9f8d1b93060cf356039e089662db7a38e58442b40c73c13772797a07143936cf06da8abd1eedb44742ddce7db4468a281a87a9d277eda792eed78cf584f25e451c35365e85bca0c6a4a1a25fee452512c527357b19b5934ecf495d3e19f850527365b1bcc4b984da443e5319f0b8deb5347609f301b03e8a69daa0b62950889260f5ffced721086f68e05a24500d464b9e541dfa56ea2d284be4a23b81649c8e61cda5a1a8d3569fcba977f48bcf54fd68d63ab967b1df38e2bc144c60b3d8b8105af6a137e8b9103bcd2a495c231b08a7555b0366deadf1981edfb2910727711b9d826dec49e611b8d2beb5de32e57ec7b5412013cf614d3a327429bf49bc1744946ede02f555c276773828eb7cf05809b7d541894a89ddb1dd2ee8015f4b88f0d366a9d1c6c81114127362fb824c27251bb7d5fa832c1ac0c1c4182a3f51cccf2f370fc5a61f5f41e2612ec7c4b483bdcb4271a3f152cbf729886c8180e1964799b6289515ce62e9d8c94dec5bde6301e6ead0ba646228acdfe8c24f33c86d0fe707d14a739b5905be8c77619683b2365dd53c3e6c7ad004d653c6d615a912a9418d3598124b7645cf5eeed9e12bb8969cbdc124d38ec54d96da0b4b294082459f028c23a07968dd8e8f1bf6acb36ff1d65b001fc1345efa25b05fdc2acdb885afa279045cf95159e8cfea615e4b0a42c83a9b8c0d43f9a72fca1d5b043df7cd4fe189fd43f9df29025ea3bf541c0ee9a6571d62398354ab6a2120aa9f3ad5e2e97983c7055960a998ce3a3318dee85a5b4f70d9250a06164ffc5b2d882c8ee7d5f20c95d6ed00f2def9a40c4c01eeb28eb746ee1ea1a1aef99776de86905410d95e587ea757666a0fcffb47fbb9c72a9a5db29c564d30ec53efdd87232ae54d8ca409ce6ebba4f66b4d9d18c95bd2f4b9b98fcef2067a2082b40179cfdbaff77cac6af8df331f71b736421c0b286e39debca6fb2b511abfa2fd78e72a439f2e4849828aa9add2f3a0b0dac429ee75084f92143c522ad3338e44a86c7f3f2465f195323118209d4f444a106d12666c1c93a9f96331754545fc24515efddcbcc7e869e36ed29d1f932f1445ecb001a6cdf7f9594bcc8cec8b3d4ebf57880c2c69d0579ef62b59cf21c5b37d53b5a7d23b4decd0627506e17f894b5f316a99ea75ecc93bcabf36c2e8d4f5da8e0306f44438f605dbf71427436708a8fdb8534673115cca4c33e11818e71282f3dede9a0be61ae7930885093388e7c14a8384baaa81343f89646761535fb6eb6fd34a5ff0f562ae8cea797c76ca8367dc7a861b023bb97f25de41585c81a18bd63e53996b49ee405c4bab3a490a23c7d30d917007eff741bcc99e3af388f0e9d4c59d45860928f3e6ecd25aa2ec62f01e8c96fe5c1020dc87d7ab2091b005b64ef02165723b2dd3aeabf83573a31b202606251fada9d9321bbeb7cb0494dafe427ab6734985b98eb6fd97daa67d3a6f7f2d324735d0841cf9b5355a7b1a59356c1af80e02c4e067503a8a43f4d2258fa8117e3d81ddc6f13d5bc650da4f73acbd7c64dca2a07845491ea8ede2a2f250decbfad43425c2f359c5d64d29921ab80d09c74cfcca2ecef3cf889c823a07cd223ea4c1837579e1fcfc692e9201c32aea197bdf15ea020d54936a8da15faad4739c522225e301f88579fb7c5b607e8fb3ee5948a9c982a79dd78ff051f408800266826462c9926cf7a3b2153a08f56bb39cd4cc0a65a293a7fa0a7a9ed366780cffaadad23a12e7629291c8b5f0898bc96a6f8ba8159fefce9e41dbb345c17f761aa018e21e9616b2e1bb79eca9e5272b4e745eee5a40d46d6cc9777e021dc2288619d4cb9308343854c08b7b5747fe895da23a96c7e4b07f249878e8bfc2b5a49b3f5dffa7f7118f70c7c9883ef292921e7d8ad12bd72a32a2a11c4d0e90c2aa9a393cb51c83e727e62e4c1d06f8df00e072c8cc3d8f1ecfd6b2618a685172401936212d545924fa4d9eaa5245b76b72da10e00f7055dc56f3ede8b7dd60f48573f3e1cbdf25cccc9b564352a72a38e77a80965b2bf8ddffa9913ee354096c481724cc5a0683cedb7eff98d774870c5ed1009e5a8db125657cbcf5ae11da4fff38477f5d4ea52bf81f6b6dda45bec64b475f9bd034d89fd1dc1f0893495855f65f8571b76184c5ce0ff6ae6d64c197adc9b41b52c06ef2626e1c04841061c824ccce8c4ee5ac0dadfba7ccf06eebe287c5db9fede486ff210abf6367ee57568b104bfe5ac7a47c982a452a38ee7601b5d600b1892d7ba5cd77b64b7c936f1898c72e2b34aa5de2d8ea7db5a127fcd33d511d72b26eab4ad4bfb0d4b95766680c3337a899505a88d3f5312d7bd3adbd9d381748e60dbba95f8491838c87c55f8ce10792bdc67183382d44b8382b8a2e70fa40a69244246edb658948e644f80904d24ec4cc1e2f42a3d5e6bad0fe0c16760f54218678d5779e540b71d2ef31a93b03a29403d47fae11deab4ef7613cb4696b175d595f4bf9bf529d0cbd851a2252ad79858ed23d5e09cd586a6901d91c344f983f3b3a09129d4df0489275e4c40e303e26d4f52d66a62473460d898c25550988d8e1e1895407a876369056e6f8e232a0bdc9f0dbf991b2d37553e16a10c0fa9bf413eaa7731ad9f5f87ffa5dec2c55fee2c02f442e8788e1a2e561ca8a671d261c75858ebb4fa251ebb7befa25695735d915ca92d3afa54b3c3c0145efc5be7dde708e10c9ad6c6e29ed3e995258cc8616e0ed2f4b2a275e19c27f1a677dfa7bd8be84f0a435d93991c6d8ee24c8aa26f5b3263b4c44f9b1a64fdf13f8f977ab1b025b3cef295637612322705c2fbc308175efaddfc52d0e6db78a4aa4834be3b21469a0d6a20fc7532c5855c2286d5ce32c8f1c08951595efa3e7bdf1ace343d4b177a03cf79b0c3bce727e1123691be245bef8d4918ce6d7bd297243a51ece88a4962a92d3631a1167d7c98", 0x9c2}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:28:31 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) [ 2286.629680][T17501] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2286.769532][T17507] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 20:28:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:28:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:28:50 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:50 executing program 3: timer_create(0x2482ed2e83f0b71, 0x0, &(0x7f0000000280)) 20:28:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:28:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:50 executing program 3: timer_create(0x2482ed2e83f0b71, 0x0, &(0x7f0000000280)) 20:28:50 executing program 3: timer_create(0x2482ed2e83f0b71, 0x0, &(0x7f0000000280)) [ 2305.766529][T17519] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2305.795386][T17524] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. 20:28:50 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x80000000) [ 2305.816631][T17517] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. 20:28:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:28:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000027c0)) 20:28:51 executing program 3: timer_create(0x2482ed2e83f0b71, 0x0, &(0x7f0000000280)) 20:28:51 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x80000000) [ 2305.945398][T17534] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. 20:29:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x10400) bind$packet(r8, &(0x7f0000000080)={0x11, 0x6, r4, 0x1, 0x40, 0x6, @random="2fe9362353df"}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0001000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff3b, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20364}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x0, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x0, 0x2, @remote}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20:29:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x80000000) 20:29:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:29:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:29:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000027c0)) 20:29:07 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x80000000) 20:29:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) [ 2322.562767][T17550] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. 20:29:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:08 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) 20:29:16 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x0, 0x0) 20:29:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 20:29:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000027c0)) 20:29:16 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) 20:29:16 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:29:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:16 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000180)="92247b86b43b7ef309af6319ca4c5b34aa7eeeb7cfdb363b7f0a5a528fd9038e2b89a569a6624eb58ad8ad473ad24a6684f0d5904ee2c96450f064cabf4f8c8147ddc5808b74aa4ab5cd2eab20514db9e4c7145ad7d5414d7ca178c85041707dcafc3418455450a79b56879b3c54f91983cc0c04e2779ed9d34a781d1ea6c460d1f00f0dae9211bcc36c99654488e1f366cb4231e6e4ebdb", 0x98, 0x80, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 20:29:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 20:29:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 20:29:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) [ 2331.382235][T16659] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2331.962478][T16659] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2331.971556][T16659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.980236][T16659] usb 6-1: Product: syz [ 2331.984788][T16659] usb 6-1: Manufacturer: syz [ 2331.989496][T16659] usb 6-1: SerialNumber: syz [ 2332.043855][T16659] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2332.642215][T16659] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2333.285866][T16661] usb 6-1: USB disconnect, device number 50 [ 2333.692272][T16659] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2333.699792][T16659] ath9k_htc: Failed to initialize the device [ 2333.708473][T16661] usb 6-1: ath9k_htc: USB layer deinitialized 20:29:26 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) 20:29:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 20:29:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000027c0)) 20:29:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 20:29:26 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:29:26 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:29:26 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) [ 2341.832184][T14460] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2341.912309][T14459] usb 4-1: new high-speed USB device number 43 using dummy_hcd 20:29:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 20:29:27 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) [ 2342.352323][T14460] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2342.361545][T14460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.370193][T14460] usb 6-1: Product: syz [ 2342.374567][T14460] usb 6-1: Manufacturer: syz [ 2342.379320][T14460] usb 6-1: SerialNumber: syz [ 2342.433150][T14460] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2342.444256][T14459] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2342.458151][T14459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:29:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) [ 2342.487874][T14459] usb 4-1: Product: syz [ 2342.495318][T14459] usb 4-1: Manufacturer: syz [ 2342.500069][T14459] usb 4-1: SerialNumber: syz [ 2342.554789][T14459] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2343.072369][T14460] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2343.122358][T14459] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:29:28 executing program 0: memfd_secret(0x80000) 20:29:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 20:29:28 executing program 0: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{0x0, 0xf0ff7f}, {&(0x7f0000000280)=""/250, 0xfa}], 0x2) 20:29:28 executing program 0: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{0x0, 0xf0ff7f}, {&(0x7f0000000280)=""/250, 0xfa}], 0x2) 20:29:28 executing program 0: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{0x0, 0xf0ff7f}, {&(0x7f0000000280)=""/250, 0xfa}], 0x2) 20:29:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) [ 2343.787392][ T5242] usb 6-1: USB disconnect, device number 51 [ 2343.848168][T16825] usb 4-1: USB disconnect, device number 43 [ 2344.092456][T14460] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2344.099474][T14460] ath9k_htc: Failed to initialize the device [ 2344.107550][ T5242] usb 6-1: ath9k_htc: USB layer deinitialized [ 2344.172348][T14459] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2344.180347][T14459] ath9k_htc: Failed to initialize the device [ 2344.189190][T16825] usb 4-1: ath9k_htc: USB layer deinitialized 20:29:29 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) [ 2344.334366][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.340693][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.702150][ T5242] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2345.302594][ T5242] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2345.313250][ T5242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.321467][ T5242] usb 6-1: Product: syz [ 2345.326541][ T5242] usb 6-1: Manufacturer: syz [ 2345.331277][ T5242] usb 6-1: SerialNumber: syz [ 2345.393646][ T5242] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2346.013774][ T5242] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2346.412261][T16661] Bluetooth: hci0: command 0x0406 tx timeout [ 2346.677847][T16659] usb 6-1: USB disconnect, device number 52 [ 2347.053679][ T5242] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2347.060650][ T5242] ath9k_htc: Failed to initialize the device [ 2347.071327][T16659] usb 6-1: ath9k_htc: USB layer deinitialized [ 2354.742254][T16659] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2355.272508][T16659] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2355.281642][T16659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.300962][T16659] usb 2-1: Product: syz [ 2355.306896][T16659] usb 2-1: Manufacturer: syz [ 2355.311506][T16659] usb 2-1: SerialNumber: syz [ 2355.363322][T16659] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2355.932348][T16658] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2356.972402][T16658] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2356.980967][T16658] ath9k_htc: Failed to initialize the device [ 2358.428934][T16658] usb 2-1: ath9k_htc: USB layer deinitialized 20:29:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) r3 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 20:29:45 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:29:45 executing program 0: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{0x0, 0xf0ff7f}, {&(0x7f0000000280)=""/250, 0xfa}], 0x2) 20:29:45 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:29:45 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:29:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x3b4, 0x0, 0x0, 0xd0e0000, 0x188, 0x100, 0x320, 0x1d8, 0x1d8, 0x320, 0x1d8, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0xffffffff, 'veth0_to_team\x00'}, 0xee05, 0x12c, 0x188, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv6=@private0, [], @ipv4=@multicast1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 20:29:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x3b4, 0x0, 0x0, 0xd0e0000, 0x188, 0x100, 0x320, 0x1d8, 0x1d8, 0x320, 0x1d8, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0xffffffff, 'veth0_to_team\x00'}, 0xee05, 0x12c, 0x188, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv6=@private0, [], @ipv4=@multicast1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 20:29:45 executing program 0: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) tgkill(r0, r1, 0x0) [ 2359.975226][T16660] usb 2-1: USB disconnect, device number 37 [ 2359.999490][T17669] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' 20:29:45 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 20:29:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x3b4, 0x0, 0x0, 0xd0e0000, 0x188, 0x100, 0x320, 0x1d8, 0x1d8, 0x320, 0x1d8, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0xffffffff, 'veth0_to_team\x00'}, 0xee05, 0x12c, 0x188, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv6=@private0, [], @ipv4=@multicast1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 20:29:45 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) [ 2360.086691][T17675] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' 20:29:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x3b4, 0x0, 0x0, 0xd0e0000, 0x188, 0x100, 0x320, 0x1d8, 0x1d8, 0x320, 0x1d8, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0xffffffff, 'veth0_to_team\x00'}, 0xee05, 0x12c, 0x188, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv6=@private0, [], @ipv4=@multicast1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) [ 2360.148115][T17679] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' [ 2360.207346][T17683] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' [ 2360.282220][T16659] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2360.282563][ T5242] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2360.802467][T16659] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2360.811547][T16659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.820168][T16659] usb 4-1: Product: syz [ 2360.824663][T16659] usb 4-1: Manufacturer: syz [ 2360.829437][T16659] usb 4-1: SerialNumber: syz [ 2360.873137][T16659] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2360.882660][ T5242] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2360.891731][ T5242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.900487][ T5242] usb 6-1: Product: syz [ 2360.905010][ T5242] usb 6-1: Manufacturer: syz [ 2360.909636][ T5242] usb 6-1: SerialNumber: syz [ 2360.953037][ T5242] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2361.462501][T16659] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2361.612267][T14459] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2362.125715][T16660] usb 4-1: USB disconnect, device number 44 [ 2362.308725][T16658] usb 6-1: USB disconnect, device number 53 [ 2362.492238][T16659] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2362.499193][T16659] ath9k_htc: Failed to initialize the device [ 2362.507329][T16660] usb 4-1: ath9k_htc: USB layer deinitialized [ 2362.652470][T14459] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2362.659465][T14459] ath9k_htc: Failed to initialize the device [ 2362.666456][T16658] usb 6-1: ath9k_htc: USB layer deinitialized [ 2376.922257][T16659] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2377.452273][T16659] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2377.461628][T16659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.470168][T16659] usb 2-1: Product: syz [ 2377.474588][T16659] usb 2-1: Manufacturer: syz [ 2377.479179][T16659] usb 2-1: SerialNumber: syz [ 2377.533506][T16659] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2378.112265][T16659] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2378.787210][ T5242] usb 2-1: USB disconnect, device number 38 [ 2379.132473][T16659] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2379.139488][T16659] ath9k_htc: Failed to initialize the device [ 2379.147138][ T5242] usb 2-1: ath9k_htc: USB layer deinitialized 20:30:04 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:30:04 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 20:30:04 executing program 4: r0 = syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6017, 0x0, 0x0, 0x0, 0x0) 20:30:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) 20:30:04 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x40, 0x1, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xa2, 0x0, 0xfffffffffffffffe) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f0000000e40)=@generic={0x3, 0x2, 0x41, "09eb57bc", "06fe99450046be415806afa6df2dad62c5f768e6d6211aacda8e9032c3908dc126ff5eda72df1af2d6afbdfeea1d4db88108d0fb8501b4d1c0c6452db4a14cab5d"}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x18, 0x0, &(0x7f00000014c0)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001e80)={{0x6, @local, 0x4e21, 0x0, 'wlc\x00', 0x24, 0x0, 0x79}, {@local, 0x4e22, 0x10000, 0xa3, 0x0, 0x8}}, 0x44) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000001f00)={[{0x5a, 0x4e00, "fa3c39e7c9bdf3e58cfd139f2a70396d587d13a32715952dff5a7959964af04f80e4940eb0d5e855767eba7e4753f8e10084636bd27db5b06c30e75165222997347aa2747aeaba07212dfc90e7c1a430bfc797ad00556223ee30"}, {0x5f, 0x4e00, "f62128eb0459a10b215363b527b76b0ee832feba054af04c0dfc9082263d20cbd2bb6014e2d0005e5023340710c46c53fd099e3ed76496d992187c6703a18e5f8efe5aa6961b40fa11b2cac6e997867fbbd8e46df98c8408ea920feea64a76"}, {}, {0x6, 0x4e00, "08beced3cbc8"}, {}, {}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), 0xffffffffffffffff) 20:30:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000003980), 0x4) 20:30:04 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 20:30:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) 20:30:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000003980), 0x4) 20:30:04 executing program 4: r0 = syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6017, 0x0, 0x0, 0x0, 0x0) 20:30:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000003980), 0x4) 20:30:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) [ 2379.602223][T14460] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2380.122494][T14460] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2380.131734][T14460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.140392][T14460] usb 4-1: Product: syz [ 2380.144922][T14460] usb 4-1: Manufacturer: syz [ 2380.149540][T14460] usb 4-1: SerialNumber: syz [ 2380.192824][T14460] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2380.772365][T14460] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2381.455596][T14459] usb 4-1: USB disconnect, device number 45 [ 2381.852215][T14460] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2381.859295][T14460] ath9k_htc: Failed to initialize the device [ 2381.877392][T14459] usb 4-1: ath9k_htc: USB layer deinitialized [ 2394.222179][T16659] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2394.742351][T16659] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2394.751547][T16659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.760029][T16659] usb 2-1: Product: syz [ 2394.764889][T16659] usb 2-1: Manufacturer: syz [ 2394.769594][T16659] usb 2-1: SerialNumber: syz [ 2394.823836][T16659] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2395.402295][T16660] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2396.091685][T14459] usb 2-1: USB disconnect, device number 39 [ 2396.492412][T16660] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2396.499508][T16660] ath9k_htc: Failed to initialize the device [ 2396.508584][T14459] usb 2-1: ath9k_htc: USB layer deinitialized 20:30:21 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0xffffffffffffffff}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:30:21 executing program 4: r0 = syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6017, 0x0, 0x0, 0x0, 0x0) 20:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) 20:30:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000003980), 0x4) 20:30:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) 20:30:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, 0x1, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4, 0x3}]}, 0x18}}, 0x0) 20:30:21 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000000000)=0x6, 0x3, 0x2) 20:30:21 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 20:30:21 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0xffffffffffffffff}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:30:21 executing program 4: r0 = syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6017, 0x0, 0x0, 0x0, 0x0) 20:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) 20:30:21 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 20:30:21 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000000000)=0x6, 0x3, 0x2) 20:30:21 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0xffffffffffffffff}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:30:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 20:30:21 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 20:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @delba={0x3, 0x2, {{}, 0x0, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) 20:30:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 20:30:28 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000000000)=0x6, 0x3, 0x2) 20:30:28 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 20:30:28 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0xffffffffffffffff}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:30:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 20:30:28 executing program 0: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:30:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 20:30:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000007e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 20:30:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 20:30:28 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000000000)=0x6, 0x3, 0x2) 20:30:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 20:30:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000007e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "80d5e9a9e9b91533ccaf9b6a094309d2da460389ce07f822b68516c537e766b6c42e423890631b5dde5b9b4accaf257d306494cf911ee841321101dda26739284df559fa895f3f72e78e2a6016543c63d97cf158cdac894a54922583bee2e36a7f36906ee7638324dc63b16324dd8d9529ccca3aa369e15476e732ef65496514cebf2b5a5af40210195c1679b8fa636ae779e047f378c6195d1d79b48b712898376adcdef72f1ec28cfacc2c6d9ba787d62dc1490db2aeb710b0577302764dd3fd39cd4cb14dbb72514a7abd7275cfef3b74cd61c1f54b68ddbc5a64039971ed81cfc2ca0001959f3e05682ccb06fffaa8d721c71a0dadb356a7bc36aac6196b"}]}}]}, 0x14c}}, 0x0) [ 2403.312160][T17653] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2403.712492][T17653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2403.729430][T17653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2403.752669][T17653] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 2403.772388][T17653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.794076][T17653] usb 4-1: config 0 descriptor?? [ 2404.274463][T17653] logitech 0003:046D:C626.0029: unknown main item tag 0x0 [ 2404.303451][T17653] logitech 0003:046D:C626.0029: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 2404.480525][T17653] usb 4-1: USB disconnect, device number 46 [ 2405.783823][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.790164][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:30:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 20:30:38 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) 20:30:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045405, &(0x7f0000000000)) 20:30:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000007e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 20:30:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 20:30:38 executing program 0: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:30:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045405, &(0x7f0000000000)) 20:30:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000007e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 20:30:38 executing program 5: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:30:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045405, &(0x7f0000000000)) 20:30:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045405, &(0x7f0000000000)) [ 2413.702308][T17653] usb 4-1: new high-speed USB device number 47 using dummy_hcd 20:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_FLOW={0x8, 0xb, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x30}}, 0x0) [ 2414.132513][T17653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2414.157369][T17653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2414.180348][T17653] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 2414.200853][T17653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2414.232929][T17653] usb 4-1: config 0 descriptor?? [ 2414.754120][T17653] logitech 0003:046D:C626.002A: unknown main item tag 0x0 [ 2414.779617][T17653] logitech 0003:046D:C626.002A: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 2415.005923][T16660] usb 4-1: USB disconnect, device number 47 20:30:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 20:30:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_FLOW={0x8, 0xb, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x30}}, 0x0) 20:30:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 20:30:53 executing program 0: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:30:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) 20:30:53 executing program 5: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:30:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_FLOW={0x8, 0xb, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x30}}, 0x0) 20:30:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_FLOW={0x8, 0xb, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x30}}, 0x0) 20:30:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) [ 2429.212208][T16660] usb 4-1: new high-speed USB device number 48 using dummy_hcd 20:30:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) 20:30:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) 20:30:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) [ 2429.632379][T16660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2429.648964][T16660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2429.686543][T16660] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 2429.723197][T16660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.753085][T16660] usb 4-1: config 0 descriptor?? [ 2430.223973][T16660] logitech 0003:046D:C626.002B: unknown main item tag 0x0 [ 2430.237502][T16660] logitech 0003:046D:C626.002B: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 2430.474538][T16659] usb 4-1: USB disconnect, device number 48 20:31:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 20:31:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 20:31:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 20:31:15 executing program 0: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:31:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0585609, &(0x7f0000000000)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2655b8e6"}, 0x0, 0x2, {0x0}}) 20:31:15 executing program 5: socket$inet6(0xa, 0x803, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000450000300000002435d05d78e0000001ac141400040090780000000045000000000000000000000000000000ac1414aa6602c5fcf0b09cef3cad69485cd7e3a55258784fda69895f2727f8f9be381800f553a1c4205f04b79e0dd92deae0bfdc6049b33a930ae85fabcb1d1aae81c973fb"], 0x34) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc910) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0xffffffffffffff3f) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 20:31:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 20:31:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 20:31:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x12, r0, 0x0) [ 2450.922264][T16660] usb 4-1: new high-speed USB device number 49 using dummy_hcd 20:31:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) 20:31:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) [ 2451.090924][T17874] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) ! 20:31:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) [ 2451.228622][T17876] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) ! [ 2451.292504][T16660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2451.313750][T16660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2451.335300][T16660] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 2451.355036][T16660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.380436][T16660] usb 4-1: config 0 descriptor?? [ 2451.873971][T16660] logitech 0003:046D:C626.002C: unknown main item tag 0x0 [ 2451.889764][T16660] logitech 0003:046D:C626.002C: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 2452.127712][T16660] usb 4-1: USB disconnect, device number 49 [ 2467.214040][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.220393][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:31:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) 20:31:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) 20:31:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) 20:31:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:31:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1000, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:31:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x321, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2467.330617][T17881] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) ! [ 2467.374079][T17890] binder: 17886:17890 ioctl c0306201 20001480 returned -14 20:31:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) 20:31:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:31:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) 20:31:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) [ 2467.555277][T17893] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) ! [ 2467.600822][T17896] binder: 17894:17896 ioctl c0306201 20001480 returned -14 20:31:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:31:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:31:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) 20:31:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2467.781215][T17906] binder: 17905:17906 ioctl c0306201 20001480 returned -14 [ 2467.800762][T17904] binder: 17903:17904 ioctl c0306201 20001480 returned -14 20:31:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x23f1cf89}, {0x1, 0x3f00}]}) 20:31:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2467.955734][T17912] binder: 17910:17912 ioctl c0306201 20001480 returned -14 20:31:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1000, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 2468.030215][T17916] binder: 17915:17916 ioctl c0306201 20001480 returned -14 20:31:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201}, 0x14}}, 0x0) 20:31:41 executing program 5: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xf9, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0xf9, &(0x7f00000001c0)}}], 0x480, 0x0) 20:31:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:31:41 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)={0x0, 0xc, [0x0, 0x0, 0x0]}) syz_clone3(&(0x7f00000022c0)={0x40800000, &(0x7f00000001c0), 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004080) 20:31:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1000, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:31:41 executing program 5: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xf9, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0xf9, &(0x7f00000001c0)}}], 0x480, 0x0) [ 2476.759924][T17927] binder: 17922:17927 ioctl c0306201 20001480 returned -14 20:31:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 20:31:42 executing program 5: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xf9, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0xf9, &(0x7f00000001c0)}}], 0x480, 0x0) 20:31:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 20:31:42 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 20:31:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201}, 0x14}}, 0x0) 20:31:50 executing program 5: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xf9, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0xf9, &(0x7f00000001c0)}}], 0x480, 0x0) 20:31:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)={0x0, 0xc, [0x0, 0x0, 0x0]}) syz_clone3(&(0x7f00000022c0)={0x40800000, &(0x7f00000001c0), 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004080) 20:31:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 20:31:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1000, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:31:50 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:50 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:50 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)={0x0, 0xc, [0x0, 0x0, 0x0]}) syz_clone3(&(0x7f00000022c0)={0x40800000, &(0x7f00000001c0), 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004080) 20:31:50 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:50 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:31:51 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:32:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201}, 0x14}}, 0x0) 20:32:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)={0x0, 0xc, [0x0, 0x0, 0x0]}) syz_clone3(&(0x7f00000022c0)={0x40800000, &(0x7f00000001c0), 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004080) 20:32:07 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:32:07 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:07 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:32:07 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:32:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x6, 0x8}]}}}]}, 0x3c}}, 0x0) 20:32:08 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:32:08 executing program 5: write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x741282, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$FUSE_POLL(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 20:32:08 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept4(r2, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 20:32:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x6, 0x8}]}}}]}, 0x3c}}, 0x0) 20:32:08 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept4(r2, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) [ 2503.686228][T18015] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 2503.702186][T18015] netlink: 33193 bytes leftover after parsing attributes in process `syz-executor.0'. 20:32:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201}, 0x14}}, 0x0) 20:32:30 executing program 5: write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x741282, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$FUSE_POLL(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 20:32:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x6, 0x8}]}}}]}, 0x3c}}, 0x0) 20:32:30 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept4(r2, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 20:32:30 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000011c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x100}, 0x0, 0x0, 0x8, 0x0, 0x5, 0xf3c, 0x0, 0x0, 0xfffc, 0x81}) r0 = msgget(0x2, 0x150) r1 = msgget(0x3, 0x200) r2 = geteuid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000001140)={{0x3, r2, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff}) r3 = getgid() r4 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000011c0)={{0x2, r2, r3, r2, r4, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81}) r5 = msgget(0x2, 0x150) r6 = msgget(0x3, 0x200) r7 = geteuid() r8 = syz_clone(0x114242480, &(0x7f0000000000)="ac13b7648f784509a9cfd025a1c6f1500dda0167c5b50f2fefea785959d57835a28baa9bed67adc317ab230b5a0ef421cbbcdb48404c4f510443ada8f700ea8c467bc473a3f33ef91eded57994ae832ba9c4bb152cf01419917fe8a23ba373b060a438", 0x63, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000001140)={{0x3, r7, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x0, 0x4, 0x1f, 0xffffffffffffffff, r8}) r9 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f00000011c0)={{0x2, r7, 0x0, r7, r9, 0xe2}, 0x0, 0x0, 0x8, 0xbff, 0x5, 0xf3c, 0x0, 0x3f, 0xfffc, 0x81, r8, r8}) r10 = syz_clone(0x49000400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="896df08d28dc8b5bb8a7ca4ea56933441daa2b485ab1fd347c266fdf96c6e9b10b1c3ce9c9542bd74c62c9a6d3927a8634") msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0xee01, r7, 0xffffffffffffffff, 0x10, 0x51}, 0x0, 0x0, 0x8, 0x101, 0x6, 0x8, 0x4bd0, 0x800, 0x9, 0x88, 0xffffffffffffffff, r10}) 20:32:30 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x6, 0x8}]}}}]}, 0x3c}}, 0x0) 20:32:30 executing program 5: write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x741282, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$FUSE_POLL(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 20:32:31 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept4(r2, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 20:32:31 executing program 5: write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x741282, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$FUSE_POLL(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 20:32:31 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:31 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) [ 2526.656163][T18057] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 2526.682251][T18057] netlink: 33193 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2526.834926][T18072] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 2526.852556][T18072] netlink: 33197 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2526.949047][T18075] netlink: 'syz-executor.5': attribute type 58 has an invalid length. [ 2526.972152][T18075] netlink: 43737 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2528.653310][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.659747][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:32:45 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) 20:32:45 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:32:45 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:45 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)='/dev/autofs\x00', 0x4) lseek(r0, 0x0, 0x1) 20:32:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)='/dev/autofs\x00', 0x4) lseek(r0, 0x0, 0x1) 20:32:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)='/dev/autofs\x00', 0x4) lseek(r0, 0x0, 0x1) 20:32:46 executing program 4: r0 = memfd_create(&(0x7f0000000000)='/dev/autofs\x00', 0x4) lseek(r0, 0x0, 0x1) 20:32:46 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 20:32:46 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) [ 2541.431625][T18093] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 2541.440179][T18093] netlink: 33197 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2541.460423][T18091] netlink: 'syz-executor.5': attribute type 58 has an invalid length. [ 2541.472036][T18091] netlink: 43737 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2541.491782][T18095] netlink: 'syz-executor.3': attribute type 58 has an invalid length. [ 2541.500448][T18095] netlink: 33197 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2541.542220][T18092] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 2541.570142][T18092] netlink: 33193 bytes leftover after parsing attributes in process `syz-executor.0'. 20:32:46 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:32:46 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 20:32:46 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) [ 2542.400456][T18120] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 2542.419040][T18120] netlink: 33197 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2542.476924][T18122] netlink: 'syz-executor.5': attribute type 58 has an invalid length. [ 2542.496996][T18122] netlink: 43737 bytes leftover after parsing attributes in process `syz-executor.5'. 20:33:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 20:33:01 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:33:01 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 20:33:01 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:33:01 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 20:33:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x48}}, 0x0) 20:33:01 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 20:33:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x48}}, 0x0) 20:33:01 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x84, 0x24, 0x0, &(0x7f0000000100)) 20:33:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x48}}, 0x0) 20:33:01 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {0x14, 0x0, 0x6000}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 20:33:01 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x84, 0x24, 0x0, &(0x7f0000000100)) [ 2556.599320][T18135] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 2556.607823][T18135] netlink: 33193 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2556.714379][T18132] netlink: 'syz-executor.3': attribute type 58 has an invalid length. [ 2556.722794][T18132] netlink: 33197 bytes leftover after parsing attributes in process `syz-executor.3'. 20:33:12 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x84, 0x24, 0x0, &(0x7f0000000100)) 20:33:12 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200ae7080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4091, 0xffb}, {&(0x7f00000019c0)=""/4091, 0xffb}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=0x0, @ANYBLOB="0126"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="584c1b5caa01", 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xad2a, 0x7802, 0x0, 0x4b6ae4f95a5de317) 20:33:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x48}}, 0x0) 20:33:12 executing program 2: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/162) 20:33:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'netdevsim0\x00', &(0x7f0000001500)=@ethtool_drvinfo={0xf, "92023bb47ececfc9a7f1178cf1b6e9c3ee0cb14c238dafa201f9c5f05e7ce452", "494c958ef95e2efb2c0ca7aad2f29f95b732bed07c3b505f56253acac1d0a306", "bc60a3699edd8873f2018b91279afe9d651ba5e4da7f53bd4df4a561bc0d5d56", "6fff6adde6465cdea7b71abf52eaef267613ce9515ab48e4570cd2dd1ac56e3e", "9cb957cc70c24ba1f3f4104d02912876d4343b1fa1a0914c2d5125ff4ad21f28", "782386ed8fdc533db51f6da4"}}) 20:33:12 executing program 2: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/162) 20:33:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'netdevsim0\x00', &(0x7f0000001500)=@ethtool_drvinfo={0xf, "92023bb47ececfc9a7f1178cf1b6e9c3ee0cb14c238dafa201f9c5f05e7ce452", "494c958ef95e2efb2c0ca7aad2f29f95b732bed07c3b505f56253acac1d0a306", "bc60a3699edd8873f2018b91279afe9d651ba5e4da7f53bd4df4a561bc0d5d56", "6fff6adde6465cdea7b71abf52eaef267613ce9515ab48e4570cd2dd1ac56e3e", "9cb957cc70c24ba1f3f4104d02912876d4343b1fa1a0914c2d5125ff4ad21f28", "782386ed8fdc533db51f6da4"}}) 20:33:12 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x84, 0x24, 0x0, &(0x7f0000000100)) 20:33:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:33:12 executing program 2: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/162) 20:33:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'netdevsim0\x00', &(0x7f0000001500)=@ethtool_drvinfo={0xf, "92023bb47ececfc9a7f1178cf1b6e9c3ee0cb14c238dafa201f9c5f05e7ce452", "494c958ef95e2efb2c0ca7aad2f29f95b732bed07c3b505f56253acac1d0a306", "bc60a3699edd8873f2018b91279afe9d651ba5e4da7f53bd4df4a561bc0d5d56", "6fff6adde6465cdea7b71abf52eaef267613ce9515ab48e4570cd2dd1ac56e3e", "9cb957cc70c24ba1f3f4104d02912876d4343b1fa1a0914c2d5125ff4ad21f28", "782386ed8fdc533db51f6da4"}}) [ 2568.088646][T18161] netlink: 'syz-executor.3': attribute type 58 has an invalid length. [ 2568.101794][T18161] netlink: 33197 bytes leftover after parsing attributes in process `syz-executor.3'. 20:33:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'netdevsim0\x00', &(0x7f0000001500)=@ethtool_drvinfo={0xf, "92023bb47ececfc9a7f1178cf1b6e9c3ee0cb14c238dafa201f9c5f05e7ce452", "494c958ef95e2efb2c0ca7aad2f29f95b732bed07c3b505f56253acac1d0a306", "bc60a3699edd8873f2018b91279afe9d651ba5e4da7f53bd4df4a561bc0d5d56", "6fff6adde6465cdea7b71abf52eaef267613ce9515ab48e4570cd2dd1ac56e3e", "9cb957cc70c24ba1f3f4104d02912876d4343b1fa1a0914c2d5125ff4ad21f28", "782386ed8fdc533db51f6da4"}}) 20:33:22 executing program 2: sysfs$2(0x2, 0x1, &(0x7f0000000040)=""/162) 20:33:22 executing program 4: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) sendto$inet6(r3, &(0x7f0000000100)="89", 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) 20:33:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:33:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:22 executing program 4: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:22 executing program 2: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) sendto$inet6(r3, &(0x7f0000000100)="89", 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) 20:33:23 executing program 4: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:23 executing program 2: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:30 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:30 executing program 2: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:30 executing program 4: r0 = io_uring_setup(0x3794, &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 20:33:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) sendto$inet6(r3, &(0x7f0000000100)="89", 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) 20:33:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:33:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:33:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) sendto$inet6(r3, &(0x7f0000000100)="89", 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) 20:33:30 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:30 executing program 2: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 20:33:30 executing program 0: syz_usb_connect(0x0, 0x19a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1, 0xa1, 0x65, 0x20, 0x499, 0x150c, 0x46ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x188, 0x2, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0xa, 0xb4, 0x7, 0xe3, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x0, 0x0, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x3, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xb11}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x10}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102}]}}, {{0x9, 0x5, 0x0, 0x16, 0x8, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x81, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x0, 0x3f, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x2}}]}}, {{0x9, 0x4, 0x0, 0xc1, 0x6, 0xcf, 0xe4, 0xfa, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0xf9, 0x3, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x200}]}}, {}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x57}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x10, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, [@generic={0x89, 0x23, "8c3cdfe90a1ff58d0185b33d2a02c4acdb2d7c28c389d54be50afa6ea3fdb748d960b002f69e1c75beec84b41a38863d64d87c12b30a709aad07f2febffaa060a9cce02b0f539c299ebd592d853d457bc79e2986626a76816893579bf44d661cc86cd8d8b111c56595a6925b98da76d06e0b52f484ebed21975b0bf3dea75bf49a2086728a7288"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf25}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x0, 0x2}, 0x1c, &(0x7f0000000980)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xae, "4feefc23f3f518d1601e540ab4e3146c"}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x2, &(0x7f0000000b80)=@string={0x2}}]}) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$hiddev(&(0x7f0000000a00), 0x252, 0x0) 20:33:30 executing program 2: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) [ 2585.862117][T17997] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2586.102129][T17997] usb 1-1: Using ep0 maxpacket: 32 [ 2586.222382][T17997] usb 1-1: config 0 has an invalid interface number: 50 but max is 1 [ 2586.233303][T17997] usb 1-1: config 0 has no interface number 1 [ 2586.259648][T17997] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2586.272274][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2586.283154][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2586.295504][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2586.309464][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2586.328270][T17997] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2586.362613][T17997] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2586.391869][T17997] usb 1-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 2586.402821][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2586.413269][T17997] usb 1-1: config 0 interface 50 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2586.423351][T17997] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x4, skipping [ 2586.434367][T17997] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2586.445263][T17997] usb 1-1: config 0 interface 0 altsetting 193 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2586.455643][T17997] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x6, skipping [ 2586.466745][T17997] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x8, skipping [ 2586.478060][T17997] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2586.488908][T17997] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2586.862149][T17997] usb 1-1: New USB device found, idVendor=0499, idProduct=150c, bcdDevice=46.ed [ 2586.871342][T17997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.886462][T17997] usb 1-1: config 0 descriptor?? [ 2586.912785][T18243] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2587.261546][T17997] usb 1-1: USB disconnect, device number 45 [ 2590.103562][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.109881][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:33:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @empty, @rand_addr=' \x01\x00', 0x8000, 0x7ff, 0x0, 0x100, 0x3, 0x2000000, r1}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 20:33:49 executing program 3: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 20:33:49 executing program 2: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 20:33:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:33:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:33:49 executing program 0: syz_usb_connect(0x0, 0x19a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1, 0xa1, 0x65, 0x20, 0x499, 0x150c, 0x46ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x188, 0x2, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0xa, 0xb4, 0x7, 0xe3, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x0, 0x0, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x3, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xb11}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x10}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102}]}}, {{0x9, 0x5, 0x0, 0x16, 0x8, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x81, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x0, 0x3f, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x2}}]}}, {{0x9, 0x4, 0x0, 0xc1, 0x6, 0xcf, 0xe4, 0xfa, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0xf9, 0x3, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x200}]}}, {}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x57}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x10, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, [@generic={0x89, 0x23, "8c3cdfe90a1ff58d0185b33d2a02c4acdb2d7c28c389d54be50afa6ea3fdb748d960b002f69e1c75beec84b41a38863d64d87c12b30a709aad07f2febffaa060a9cce02b0f539c299ebd592d853d457bc79e2986626a76816893579bf44d661cc86cd8d8b111c56595a6925b98da76d06e0b52f484ebed21975b0bf3dea75bf49a2086728a7288"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf25}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x0, 0x2}, 0x1c, &(0x7f0000000980)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xae, "4feefc23f3f518d1601e540ab4e3146c"}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x2, &(0x7f0000000b80)=@string={0x2}}]}) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$hiddev(&(0x7f0000000a00), 0x252, 0x0) 20:33:49 executing program 3: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 20:33:49 executing program 2: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 20:33:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 20:33:50 executing program 3: r0 = syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 20:33:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) [ 2605.082048][ T5242] usb 1-1: new high-speed USB device number 46 using dummy_hcd 20:33:50 executing program 3: timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2605.332035][ T5242] usb 1-1: Using ep0 maxpacket: 32 [ 2605.452584][ T5242] usb 1-1: config 0 has an invalid interface number: 50 but max is 1 [ 2605.475065][ T5242] usb 1-1: config 0 has no interface number 1 [ 2605.504361][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2605.578226][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2605.625509][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2605.669841][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2605.712402][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2605.761359][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2605.786397][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2605.797724][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 2605.810117][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2605.821669][ T5242] usb 1-1: config 0 interface 50 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2605.844768][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x4, skipping [ 2605.864577][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2605.882152][ T5242] usb 1-1: config 0 interface 0 altsetting 193 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2605.901380][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x6, skipping [ 2605.915211][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x8, skipping [ 2605.926897][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2605.938307][ T5242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2606.312132][ T5242] usb 1-1: New USB device found, idVendor=0499, idProduct=150c, bcdDevice=46.ed [ 2606.322521][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.342660][ T5242] usb 1-1: config 0 descriptor?? [ 2606.362814][T18255] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2606.744319][ T5242] usb 1-1: USB disconnect, device number 46 20:34:02 executing program 0: syz_usb_connect(0x0, 0x19a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1, 0xa1, 0x65, 0x20, 0x499, 0x150c, 0x46ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x188, 0x2, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0xa, 0xb4, 0x7, 0xe3, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x0, 0x0, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x3, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xb11}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x10}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102}]}}, {{0x9, 0x5, 0x0, 0x16, 0x8, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x81, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x0, 0x3f, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x2}}]}}, {{0x9, 0x4, 0x0, 0xc1, 0x6, 0xcf, 0xe4, 0xfa, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0xf9, 0x3, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x200}]}}, {}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x57}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x10, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, [@generic={0x89, 0x23, "8c3cdfe90a1ff58d0185b33d2a02c4acdb2d7c28c389d54be50afa6ea3fdb748d960b002f69e1c75beec84b41a38863d64d87c12b30a709aad07f2febffaa060a9cce02b0f539c299ebd592d853d457bc79e2986626a76816893579bf44d661cc86cd8d8b111c56595a6925b98da76d06e0b52f484ebed21975b0bf3dea75bf49a2086728a7288"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf25}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x0, 0x2}, 0x1c, &(0x7f0000000980)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xae, "4feefc23f3f518d1601e540ab4e3146c"}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x2, &(0x7f0000000b80)=@string={0x2}}]}) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$hiddev(&(0x7f0000000a00), 0x252, 0x0) 20:34:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 20:34:02 executing program 3: timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 20:34:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x16, "874ab28a331bafd8"}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 20:34:02 executing program 1: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x24004001) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x0, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001100)=ANY=[@ANYBLOB="7261770000000000006e00000007b1100300000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00200010000000000000000e40000000100100000ffbd000000b69f4b5db3780500000076655f310000000000000000000000000900000000000000000000000000000000000000010000000000000000000000c001080200000000000000000000000000020000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000300000000010000000000000000e4ff0800000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004bc43042d5538b880000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7d90c84c9a24a3e00000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003230000070000000000000000000000000000014800435400000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000001c00000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000400000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000013000000000000002800000000000000000000000000000000000000000000000000000000000000feffffffe03ce196c6ec1244f4507717bc9e992efabc654b26903ef19e04bb86d271204c02ddbeb64c297dd65c7b6ae4898b"], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 20:34:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 20:34:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x4, 0x7, 0x201, 0x0, 0x0, {}, [@generic='0']}, 0x18}}, 0x0) 20:34:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:02 executing program 3: timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 20:34:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x4, 0x7, 0x201, 0x0, 0x0, {}, [@generic='0']}, 0x18}}, 0x0) [ 2617.511304][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2617.606974][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2617.612261][ T5242] usb 1-1: new high-speed USB device number 47 using dummy_hcd 20:34:02 executing program 3: timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2617.882070][ T5242] usb 1-1: Using ep0 maxpacket: 32 [ 2618.022641][ T5242] usb 1-1: config 0 has an invalid interface number: 50 but max is 1 [ 2618.039202][ T5242] usb 1-1: config 0 has no interface number 1 [ 2618.047586][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2618.058747][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2618.074632][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2618.090466][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2618.109723][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2618.128797][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2618.147804][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2618.167787][ T5242] usb 1-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 2618.186665][ T5242] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2618.214535][ T5242] usb 1-1: config 0 interface 50 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2618.232204][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x4, skipping [ 2618.243497][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2618.254604][ T5242] usb 1-1: config 0 interface 0 altsetting 193 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2618.265169][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x6, skipping [ 2618.276298][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x8, skipping [ 2618.287246][ T5242] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2618.298369][ T5242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2618.732345][ T5242] usb 1-1: New USB device found, idVendor=0499, idProduct=150c, bcdDevice=46.ed [ 2618.741424][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.752784][ T5242] usb 1-1: config 0 descriptor?? [ 2618.772975][T18281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2619.157523][ T5242] usb 1-1: USB disconnect, device number 47 [ 2619.203681][T18285] udevd[18285]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.50/sound/card3/controlC3/../uevent} for writing: No such file or directory 20:34:04 executing program 0: syz_usb_connect(0x0, 0x19a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1, 0xa1, 0x65, 0x20, 0x499, 0x150c, 0x46ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x188, 0x2, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0xa, 0xb4, 0x7, 0xe3, 0x0, [], [{{0x9, 0x5, 0x80, 0x1, 0x0, 0x0, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x3, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xb11}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x10}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102}]}}, {{0x9, 0x5, 0x0, 0x16, 0x8, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x81, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x0, 0x3f, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x2}}]}}, {{0x9, 0x4, 0x0, 0xc1, 0x6, 0xcf, 0xe4, 0xfa, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0xf9, 0x3, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x200}]}}, {}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x57}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x10, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, [@generic={0x89, 0x23, "8c3cdfe90a1ff58d0185b33d2a02c4acdb2d7c28c389d54be50afa6ea3fdb748d960b002f69e1c75beec84b41a38863d64d87c12b30a709aad07f2febffaa060a9cce02b0f539c299ebd592d853d457bc79e2986626a76816893579bf44d661cc86cd8d8b111c56595a6925b98da76d06e0b52f484ebed21975b0bf3dea75bf49a2086728a7288"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf25}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x0, 0x2}, 0x1c, &(0x7f0000000980)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xae, "4feefc23f3f518d1601e540ab4e3146c"}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x2, &(0x7f0000000b80)=@string={0x2}}]}) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$hiddev(&(0x7f0000000a00), 0x252, 0x0) 20:34:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x4, 0x7, 0x201, 0x0, 0x0, {}, [@generic='0']}, 0x18}}, 0x0) 20:34:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:04 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 2619.602292][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2619.912160][T17997] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2620.152329][T17997] usb 1-1: Using ep0 maxpacket: 32 [ 2620.272283][T17997] usb 1-1: config 0 has an invalid interface number: 50 but max is 1 [ 2620.280399][T17997] usb 1-1: config 0 has no interface number 1 [ 2620.287210][T17997] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2620.298056][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2620.308136][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2620.319220][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2620.329150][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2620.339159][T17997] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2620.349850][T17997] usb 1-1: config 0 interface 50 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2620.360614][T17997] usb 1-1: config 0 interface 50 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 2620.371306][T17997] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2620.381167][T17997] usb 1-1: config 0 interface 50 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2620.391125][T17997] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x4, skipping [ 2620.402072][T17997] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2620.413150][T17997] usb 1-1: config 0 interface 0 altsetting 193 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2620.423082][T17997] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x6, skipping [ 2620.433855][T17997] usb 1-1: config 0 interface 0 altsetting 193 has a duplicate endpoint with address 0x8, skipping [ 2620.444833][T17997] usb 1-1: config 0 interface 0 altsetting 193 has an invalid endpoint with address 0x0, skipping [ 2620.455575][T17997] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2620.822157][T17997] usb 1-1: New USB device found, idVendor=0499, idProduct=150c, bcdDevice=46.ed [ 2620.831250][T17997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.850712][T17997] usb 1-1: config 0 descriptor?? [ 2620.872783][T18323] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2621.220843][T17997] usb 1-1: USB disconnect, device number 48 20:34:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 20:34:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x4, 0x7, 0x201, 0x0, 0x0, {}, [@generic='0']}, 0x18}}, 0x0) 20:34:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:24 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 2639.172470][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:34:24 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRK(r0, 0x540a, 0x1) 20:34:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:24 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:24 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRK(r0, 0x540a, 0x1) 20:34:24 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, &(0x7f0000000140), 0x4a, 0x0, 0x0, 0x1a0}, 0x0) [ 2651.533167][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.539624][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:34:36 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc2, 0x38, 0x9a, 0x40, 0x403, 0xfa78, 0x4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0xed, 0x8b}}]}}]}}, 0x0) 20:34:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRK(r0, 0x540a, 0x1) 20:34:36 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, &(0x7f0000000140), 0x4a, 0x0, 0x0, 0x1a0}, 0x0) 20:34:36 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x45, 0x1c, 0x2}, 0x1c) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="1a", 0x1}], 0x1) 20:34:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', 0x0}) 20:34:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 20:34:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', 0x0}) 20:34:36 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, &(0x7f0000000140), 0x4a, 0x0, 0x0, 0x1a0}, 0x0) 20:34:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRK(r0, 0x540a, 0x1) 20:34:36 executing program 4: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 20:34:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', 0x0}) 20:34:36 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, &(0x7f0000000140), 0x4a, 0x0, 0x0, 0x1a0}, 0x0) [ 2660.291983][T17997] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2660.652472][T17997] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.4c [ 2660.661554][T17997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2660.680994][T17997] usb 2-1: config 0 descriptor?? [ 2660.726516][T17997] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2660.737808][T17997] usb 2-1: Detected SIO [ 2660.751331][T17997] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2660.931825][T14459] usb 2-1: USB disconnect, device number 40 [ 2660.942565][T14459] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2660.961493][T14459] ftdi_sio 2-1:0.0: device disconnected 20:34:46 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc2, 0x38, 0x9a, 0x40, 0x403, 0xfa78, 0x4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0xed, 0x8b}}]}}]}}, 0x0) 20:34:46 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) 20:34:46 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:34:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001140)=""/220) 20:34:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', 0x0}) 20:34:46 executing program 5: syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005c0d1708dc17020206c70102030109022c00010000000009040000000e0100000824020100010000092402020000a8e9000924020200108b0d"], 0x0) 20:34:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 20:34:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045515, &(0x7f0000000040)) 20:34:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001140)=""/220) 20:34:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 20:34:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045515, &(0x7f0000000040)) 20:34:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) [ 2661.742089][T17997] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2662.012029][T17997] usb 6-1: Using ep0 maxpacket: 8 [ 2662.322148][T17997] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=c7.06 [ 2662.331224][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2662.339793][T17997] usb 6-1: Product: syz [ 2662.344322][T17997] usb 6-1: Manufacturer: syz [ 2662.348935][T17997] usb 6-1: SerialNumber: syz [ 2662.364010][T17997] usb 6-1: config 0 descriptor?? [ 2662.652273][T17997] usb 6-1: Found UVC 0.00 device syz (17dc:0202) [ 2662.658667][T17997] usb 6-1: No valid video chain found. [ 2662.671717][T17997] usb 6-1: USB disconnect, device number 54 [ 2672.222231][T17998] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2672.582070][T17998] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.4c [ 2672.591147][T17998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.603233][T17998] usb 2-1: config 0 descriptor?? [ 2672.644121][T17998] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2672.652774][T17998] usb 2-1: Detected SIO [ 2672.658187][T17998] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2672.878919][T17990] usb 2-1: USB disconnect, device number 41 [ 2672.889575][T17990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2672.902230][T17990] ftdi_sio 2-1:0.0: device disconnected 20:34:58 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc2, 0x38, 0x9a, 0x40, 0x403, 0xfa78, 0x4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0xed, 0x8b}}]}}]}}, 0x0) 20:34:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001140)=""/220) 20:34:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045515, &(0x7f0000000040)) 20:34:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 20:34:58 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:34:58 executing program 5: syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005c0d1708dc17020206c70102030109022c00010000000009040000000e0100000824020100010000092402020000a8e9000924020200108b0d"], 0x0) 20:34:58 executing program 3: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:34:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045515, &(0x7f0000000040)) 20:34:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001140)=""/220) 20:34:58 executing program 2: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:34:58 executing program 4: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2673.692170][T17998] usb 6-1: new high-speed USB device number 55 using dummy_hcd 20:34:58 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2673.932132][T17998] usb 6-1: Using ep0 maxpacket: 8 [ 2674.212216][T17998] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=c7.06 [ 2674.221407][T17998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.230013][T17998] usb 6-1: Product: syz [ 2674.234514][T17998] usb 6-1: Manufacturer: syz [ 2674.239127][T17998] usb 6-1: SerialNumber: syz [ 2674.248952][T17998] usb 6-1: config 0 descriptor?? [ 2674.532160][T17998] usb 6-1: Found UVC 0.00 device syz (17dc:0202) [ 2674.538700][T17998] usb 6-1: No valid video chain found. [ 2674.558163][T17998] usb 6-1: USB disconnect, device number 55 [ 2679.962096][T14459] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2680.322356][T14459] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.4c [ 2680.331480][T14459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.343765][T14459] usb 2-1: config 0 descriptor?? [ 2680.393277][T14459] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2680.401291][T14459] usb 2-1: Detected SIO [ 2680.418404][T14459] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2680.617573][T17997] usb 2-1: USB disconnect, device number 42 [ 2680.630412][T17997] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2680.641651][T17997] ftdi_sio 2-1:0.0: device disconnected 20:35:06 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc2, 0x38, 0x9a, 0x40, 0x403, 0xfa78, 0x4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0xed, 0x8b}}]}}]}}, 0x0) 20:35:06 executing program 3: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:06 executing program 2: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:06 executing program 4: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:06 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:06 executing program 5: syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005c0d1708dc17020206c70102030109022c00010000000009040000000e0100000824020100010000092402020000a8e9000924020200108b0d"], 0x0) 20:35:06 executing program 4: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2681.462021][T17990] usb 6-1: new high-speed USB device number 56 using dummy_hcd 20:35:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x7], 0x1}) 20:35:06 executing program 2: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:06 executing program 3: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000480)={0x8, [0x2], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x834, 0x0, 0x0, 0x0, 0x1}], 0x7ff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x7], 0x1}) 20:35:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x7], 0x1}) [ 2681.742058][T17990] usb 6-1: Using ep0 maxpacket: 8 [ 2682.052252][T17990] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=c7.06 [ 2682.061369][T17990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.071254][T17990] usb 6-1: Product: syz [ 2682.075916][T17990] usb 6-1: Manufacturer: syz [ 2682.080534][T17990] usb 6-1: SerialNumber: syz [ 2682.087476][T17990] usb 6-1: config 0 descriptor?? [ 2682.372247][T17990] usb 6-1: Found UVC 0.00 device syz (17dc:0202) [ 2682.378677][T17990] usb 6-1: No valid video chain found. [ 2682.386677][T17990] usb 6-1: USB disconnect, device number 56 [ 2691.882039][T17653] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2692.272532][T17653] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.4c [ 2692.281606][T17653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2692.291584][T17653] usb 2-1: config 0 descriptor?? [ 2692.333543][T17653] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2692.343761][T17653] usb 2-1: Detected SIO [ 2692.348786][T17653] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2694.603189][T17653] usb 2-1: USB disconnect, device number 43 [ 2694.612198][T17653] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2694.621967][T17653] ftdi_sio 2-1:0.0: device disconnected 20:35:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000240007070000ee0d0010000000020000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 20:35:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x7], 0x1}) 20:35:20 executing program 2: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) 20:35:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) 20:35:20 executing program 5: syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005c0d1708dc17020206c70102030109022c00010000000009040000000e0100000824020100010000092402020000a8e9000924020200108b0d"], 0x0) 20:35:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) [ 2695.170822][T18515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:35:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000240007070000ee0d0010000000020000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 20:35:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) 20:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00007a3000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f00002b9000/0x3000)=nil, 0x7fffdfd46000}) 20:35:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) 20:35:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000240007070000ee0d0010000000020000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 2695.357803][T18525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:35:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) 20:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00007a3000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f00002b9000/0x3000)=nil, 0x7fffdfd46000}) [ 2695.422217][T17990] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2695.448298][T17996] usb 6-1: new high-speed USB device number 57 using dummy_hcd 20:35:20 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) [ 2695.484156][T18529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2695.712143][T17990] usb 3-1: Using ep0 maxpacket: 8 [ 2695.722709][T17996] usb 6-1: Using ep0 maxpacket: 8 [ 2695.832211][T17990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2695.843056][T17990] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2696.002162][T17996] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=c7.06 [ 2696.011537][T17996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.020561][T17990] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2696.041964][T17996] usb 6-1: Product: syz [ 2696.046178][T17996] usb 6-1: Manufacturer: syz [ 2696.050759][T17996] usb 6-1: SerialNumber: syz [ 2696.055720][T17990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.064192][T17990] usb 3-1: Product: syz [ 2696.068360][T17990] usb 3-1: Manufacturer: syz [ 2696.073952][T17990] usb 3-1: SerialNumber: syz [ 2696.080062][T17996] usb 6-1: config 0 descriptor?? [ 2696.382219][T17996] usb 6-1: Found UVC 0.00 device syz (17dc:0202) [ 2696.388862][T17996] usb 6-1: No valid video chain found. [ 2696.412379][T17990] usb 3-1: 0:2 : does not exist [ 2696.423900][T17996] usb 6-1: USB disconnect, device number 57 [ 2696.498579][T17990] usb 3-1: USB disconnect, device number 44 [ 2696.523189][T18506] udevd[18506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 20:35:21 executing program 2: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) 20:35:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000240007070000ee0d0010000000020000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 20:35:22 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) 20:35:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00007a3000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f00002b9000/0x3000)=nil, 0x7fffdfd46000}) [ 2696.902828][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:35:22 executing program 5: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) [ 2697.153802][ T5242] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2697.333154][T17653] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2697.432953][ T5242] usb 3-1: Using ep0 maxpacket: 8 [ 2697.562753][ T5242] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2697.573204][T17653] usb 6-1: Using ep0 maxpacket: 8 [ 2697.593121][ T5242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2697.712389][T17653] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2697.722636][T17653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2697.782227][ T5242] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2697.791357][ T5242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.809476][ T5242] usb 3-1: Product: syz [ 2697.814124][ T5242] usb 3-1: Manufacturer: syz [ 2697.818774][ T5242] usb 3-1: SerialNumber: syz [ 2698.632285][T17653] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2698.834702][T17653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.852884][T17653] usb 6-1: Product: syz [ 2698.857080][T17653] usb 6-1: Manufacturer: syz [ 2698.861683][T17653] usb 6-1: SerialNumber: syz [ 2698.962190][ T5242] usb 3-1: 0:2 : does not exist [ 2699.076591][ T5242] usb 3-1: USB disconnect, device number 45 [ 2699.222118][T17653] usb 6-1: 0:2 : does not exist [ 2699.339861][T17653] usb 6-1: USB disconnect, device number 58 20:35:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) 20:35:29 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) 20:35:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00007a3000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f00002b9000/0x3000)=nil, 0x7fffdfd46000}) 20:35:29 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) 20:35:29 executing program 2: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) 20:35:29 executing program 5: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) 20:35:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)=@ipv6_delrule={0x24, 0x21, 0x501, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 20:35:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)=@ipv6_delrule={0x24, 0x21, 0x501, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) [ 2704.847220][T17990] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2704.853218][T17653] usb 3-1: new high-speed USB device number 46 using dummy_hcd 20:35:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)=@ipv6_delrule={0x24, 0x21, 0x501, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 20:35:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)=@ipv6_delrule={0x24, 0x21, 0x501, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}}, 0x0) 20:35:30 executing program 0: setrlimit(0x7, &(0x7f0000000180)) inotify_init1(0x0) [ 2705.222630][T17990] usb 6-1: Using ep0 maxpacket: 8 [ 2705.343011][T17990] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2705.384840][T17990] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2705.465578][T17653] usb 3-1: Using ep0 maxpacket: 8 20:35:30 executing program 0: setrlimit(0x7, &(0x7f0000000180)) inotify_init1(0x0) [ 2705.619006][T17990] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2705.630634][T17990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.666210][T17990] usb 6-1: Product: syz [ 2705.670654][T17990] usb 6-1: Manufacturer: syz [ 2705.676054][T17990] usb 6-1: SerialNumber: syz [ 2705.939837][T17653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2706.042850][T17990] usb 6-1: 0:2 : does not exist [ 2706.130572][T17653] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2706.171735][T17990] usb 6-1: USB disconnect, device number 59 [ 2706.216229][T18556] udevd[18556]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2706.772075][T17653] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2706.782671][T17653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.790691][T17653] usb 3-1: Product: syz [ 2706.795208][T17653] usb 3-1: Manufacturer: syz [ 2706.799814][T17653] usb 3-1: SerialNumber: syz [ 2707.122202][T17653] usb 3-1: 0:2 : does not exist [ 2707.209805][T17653] usb 3-1: USB disconnect, device number 46 [ 2707.235824][T18556] udevd[18556]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2712.983482][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2712.989810][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:35:48 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close$fd_v4l2_buffer(r0) 20:35:48 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) 20:35:48 executing program 0: setrlimit(0x7, &(0x7f0000000180)) inotify_init1(0x0) 20:35:48 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) 20:35:48 executing program 5: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) 20:35:48 executing program 2: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c240200ff07000000000000062405020002092403000403000277"], 0x0) 20:35:48 executing program 0: setrlimit(0x7, &(0x7f0000000180)) inotify_init1(0x0) 20:35:48 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x5, 0x20000000, 0x4) 20:35:48 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x5, 0x20000000, 0x4) [ 2723.786454][T17998] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2723.891888][T17653] usb 6-1: new high-speed USB device number 60 using dummy_hcd 20:35:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x5, 0x20000000, 0x4) [ 2724.042042][T17998] usb 3-1: Using ep0 maxpacket: 8 [ 2724.164460][T17998] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2724.175136][T17998] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2724.353514][T17998] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2724.380094][T17998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.429010][T17998] usb 3-1: Product: syz [ 2724.450696][T17998] usb 3-1: Manufacturer: syz [ 2724.486450][T17998] usb 3-1: SerialNumber: syz 20:35:49 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) 20:35:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) [ 2724.922070][T17653] usb 6-1: Using ep0 maxpacket: 8 [ 2724.984190][T17998] usb 3-1: 0:2 : does not exist [ 2725.043224][T17653] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2725.059302][T17653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2725.074866][T17998] usb 3-1: USB disconnect, device number 47 [ 2725.126564][T18587] udevd[18587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2725.272368][T17653] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2725.281847][T17653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2725.290394][T17653] usb 6-1: Product: syz [ 2725.296496][T17653] usb 6-1: Manufacturer: syz [ 2725.301729][T17653] usb 6-1: SerialNumber: syz [ 2725.662139][T17653] usb 6-1: 0:2 : does not exist [ 2725.767247][T17653] usb 6-1: USB disconnect, device number 60 [ 2725.829857][T18587] udevd[18587]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 20:35:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x5, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x91, &(0x7f00000000c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:35:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:35:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) 20:35:58 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x5, 0x20000000, 0x4) 20:35:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) 20:35:58 executing program 2: syz_emit_ethernet(0xa6, &(0x7f0000000440)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "7900c9", 0x6c, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "5bd0425c133d8b25385916dbc17ca6e56645f5dea3b60cd95e4ab1c0f470d509", "0c9ddaad024836141048195a052e2118", {"830fbe313c2121ce7c6faac7d9e2db56", "604ae1156bd9884b1987d4a5600c304d"}}}}}}}}, 0x0) 20:35:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) 20:35:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x5, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x91, &(0x7f00000000c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:35:59 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000001800)='/sys/kernel/profiling', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xfffffffeffffffff, 0x0) 20:35:59 executing program 2: syz_emit_ethernet(0xa6, &(0x7f0000000440)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "7900c9", 0x6c, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "5bd0425c133d8b25385916dbc17ca6e56645f5dea3b60cd95e4ab1c0f470d509", "0c9ddaad024836141048195a052e2118", {"830fbe313c2121ce7c6faac7d9e2db56", "604ae1156bd9884b1987d4a5600c304d"}}}}}}}}, 0x0) 20:35:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) 20:35:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) 20:35:59 executing program 2: syz_emit_ethernet(0xa6, &(0x7f0000000440)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "7900c9", 0x6c, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "5bd0425c133d8b25385916dbc17ca6e56645f5dea3b60cd95e4ab1c0f470d509", "0c9ddaad024836141048195a052e2118", {"830fbe313c2121ce7c6faac7d9e2db56", "604ae1156bd9884b1987d4a5600c304d"}}}}}}}}, 0x0) 20:36:08 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000001800)='/sys/kernel/profiling', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xfffffffeffffffff, 0x0) 20:36:08 executing program 2: syz_emit_ethernet(0xa6, &(0x7f0000000440)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "7900c9", 0x6c, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "5bd0425c133d8b25385916dbc17ca6e56645f5dea3b60cd95e4ab1c0f470d509", "0c9ddaad024836141048195a052e2118", {"830fbe313c2121ce7c6faac7d9e2db56", "604ae1156bd9884b1987d4a5600c304d"}}}}}}}}, 0x0) 20:36:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x5, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x91, &(0x7f00000000c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:36:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) 20:36:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10160, 0x0) 20:36:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b37, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:36:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 20:36:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xac}}, 0x0) 20:36:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x5, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x91, &(0x7f00000000c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:36:08 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000001800)='/sys/kernel/profiling', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xfffffffeffffffff, 0x0) 20:36:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b37, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:36:08 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) 20:36:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xac}}, 0x0) 20:36:27 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) 20:36:27 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) 20:36:27 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000001800)='/sys/kernel/profiling', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xfffffffeffffffff, 0x0) 20:36:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xac}}, 0x0) 20:36:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b37, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:36:27 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) 20:36:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:36:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xac}}, 0x0) 20:36:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b37, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:36:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) 20:36:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) 20:36:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) [ 2763.172134][T17653] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2763.461984][T17653] usb 6-1: Using ep0 maxpacket: 32 [ 2763.722203][T17653] usb 6-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2763.732832][T17653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2763.952160][T17653] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2763.961363][T17653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.970678][T17653] usb 6-1: Product: ࠉ [ 2763.975257][T17653] usb 6-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2763.993915][T17653] usb 6-1: SerialNumber: Ї [ 2764.362660][T17653] usb 6-1: 0:2 : does not exist [ 2764.391632][T17653] usb 6-1: USB disconnect, device number 61 20:36:37 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) 20:36:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) 20:36:37 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) 20:36:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:36:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:36:37 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) 20:36:37 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) 20:36:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:36:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:36:37 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) [ 2772.482519][T17653] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2772.542469][T14461] usb 4-1: new high-speed USB device number 50 using dummy_hcd 20:36:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 2772.742047][T17653] usb 6-1: Using ep0 maxpacket: 32 [ 2772.792068][T14461] usb 4-1: Using ep0 maxpacket: 32 20:36:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 2772.942632][T17653] usb 6-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2772.961418][T17653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2772.992351][T14461] usb 4-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2773.008785][T14461] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2773.142121][T17653] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2773.151205][T17653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.159898][T17653] usb 6-1: Product: ࠉ [ 2773.164384][T17653] usb 6-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2773.182480][T17653] usb 6-1: SerialNumber: Ї [ 2773.202085][T14461] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2773.211264][T14461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.220064][T14461] usb 4-1: Product: ࠉ [ 2773.224897][T14461] usb 4-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2773.243996][T14461] usb 4-1: SerialNumber: Ї [ 2773.542187][T17653] usb 6-1: 0:2 : does not exist [ 2773.555770][T17653] usb 6-1: USB disconnect, device number 62 [ 2773.632097][T14461] usb 4-1: 0:2 : does not exist [ 2773.653287][T14461] usb 4-1: USB disconnect, device number 50 [ 2773.657717][T18704] udevd[18704]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2773.703534][T18725] udevd[18725]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2774.413195][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.419526][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:36:48 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e800000ca, 0x0, 0x0, 0x9700}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x4000) 20:36:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:36:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:36:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:36:48 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) 20:36:48 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) 20:36:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 2784.031997][T17996] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2784.031997][T14461] usb 6-1: new high-speed USB device number 63 using dummy_hcd 20:36:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) [ 2784.301909][T17996] usb 4-1: Using ep0 maxpacket: 32 [ 2784.301956][T14461] usb 6-1: Using ep0 maxpacket: 32 [ 2784.502768][T17996] usb 4-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2784.529661][T17996] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 20:36:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) [ 2784.575181][T14461] usb 6-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2784.608447][T14461] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 20:36:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) [ 2784.722040][T17996] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2784.731254][T17996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.772010][T17996] usb 4-1: Product: ࠉ [ 2784.776650][T17996] usb 4-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2784.811963][T17996] usb 4-1: SerialNumber: Ї [ 2784.852373][T14461] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2784.870540][T14461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.898538][T14461] usb 6-1: Product: ࠉ [ 2784.914529][T14461] usb 6-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2784.956097][T14461] usb 6-1: SerialNumber: Ї [ 2785.202054][T17996] usb 4-1: 0:2 : does not exist [ 2785.228423][T17996] usb 4-1: USB disconnect, device number 51 [ 2785.382807][T14461] usb 6-1: 0:2 : does not exist [ 2785.421014][T14461] usb 6-1: USB disconnect, device number 63 20:36:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:36:50 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) [ 2786.032086][T17653] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2786.292093][T17653] usb 4-1: Using ep0 maxpacket: 32 [ 2786.502475][T17653] usb 4-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2786.525219][T17653] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2786.732257][T17653] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2786.744995][T17653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2786.760595][T17653] usb 4-1: Product: ࠉ [ 2786.768354][T17653] usb 4-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2786.800905][T17653] usb 4-1: SerialNumber: Ї [ 2787.192197][T17653] usb 4-1: 0:2 : does not exist [ 2787.217346][T17653] usb 4-1: USB disconnect, device number 52 [ 2787.239561][T18763] udevd[18763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 20:37:02 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 20:37:02 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xa, 0xcb, {0xcb, 0x1, "6186f8b2b886a78f66c3fb2461958853900aaac7dc26b379b0ff5f2a404fb2f605b142de9227774bceba7ab03083c601197571e6368fe3c8f14660f0746fbd3cc467419b3b939edf3de12e05c15077a9b3414592188be7dfaa4cc0485bdb0a446be984845597e7277bc37c0970c9fe95ac5dd64303a8f413c881d0109a2ab7aaf80b8daa309f2e13f908feab5a1835a57553aa72ebddc8fca7c9ce09e0e3ae1aff59179ad1ceca5c655fe46a0b92250ee1096a905eceb1b25a791471297fa1437db0db85c11a67ad9e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x92, "a7ca6bbed92860b73d9cc48698accbe1c7645efd85a8a09954e74f648b6189dfd69dc5d1725191ab445b4bee22069daed13afb516c1b6f069d8594ece2dc53562523c7add2f462d72eef3e8595f10ef9b96c9e7270aecf4036464f1f4121f5cba212d1c4edfb7ebaf6af83963ec9ba166e644210ee73340f8bbb24219305d0df725d2f07a039069aa648da4517bc7f7e01c7"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0xfff, 0x3ff, 0x3, 0x7, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0xffff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc5, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x20, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x200, 0x1, '\x00W'}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x7, 0x5, 0x8, 0x7], 0x3f}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xf219, 0x4, "1193c5d899"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "e6d4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa4, 0x2, 0x1, 0x6, "ac005a24d65de6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x59, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xffff, 0x2, "7de1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x81, 0xff, {0x7, 0x25, 0x1, 0x80, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x40, 0x7, 0x81, 0xff, 0x1}, 0xa0, &(0x7f00000005c0)={0x5, 0xf, 0xa0, 0x2, [@generic={0x98, 0x10, 0x1, "c57aa288f9c3d25b4035ec3e05a10d1a0827d2e2a160fe978a11db7c02b80ce432f40948a1c44e3f7b272863dbf3064970721c6f6ca71b0a70f4cb5c43a597246849d2511f04b4b7b988cf1d6314a7345692a57e59726c3bc2d895b9bc1acda506b8a4ed729066d949b14c032b9959655b4f6d4519a9e5062efbc3d797a2ab83bbd1a318879fbe3dca48bc68ea4d2a4cad8495a295"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x200a}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "6ca859eb171bc8f5965535dea4ec523be051a36a956d40234e69c47d7a624c6b29418d2c801e95824ad488bd1bd73eb211499047537ac9e4d192da152b9c51fcf284493fa7a3f7432ec0d1462ec1828fff392e3d1e489e09c59b33755ad1cc9cf9cb9b930b13666a"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "c7acf1a3310483731cfddc220b97e262c4e1056d5f4e5d909a5c8dc12aeec8c1a42c084aa021de3c83166d9ef5fbb15bda626fe6692657eeadd317ba881a18b7d365aca97d758df0a93202d97778900813ca4fe0a63f48bce3a7c528b0ae56671d42c837d71ff28d24219e84e8c49185fccf499a4686ccbb617d1e1725181c09bd3e5ab6c07371e8588b39310986f0174779c49c41294a8f2e2dcfd17472ba0f710802a669a28bc4047556"}}, {0xac, &(0x7f00000008c0)=@string={0xac, 0x3, "009f10c20e4dc54d17ea13c85f0d833e40e2c0fefd23ec0cd5f5c6c205839f6432071cebd3c6c3e077c6e607f53f8aa44f5e5d0c3accbae292dcd6e564edb62cd8598a6a6be32a15497d57807e981becc8a9ae11865f2f92650a26b1d980d7c8d0d5bc179aaa52463cb1aac192fa19953a8be0f33b4c3a09508db883478497327d03eb60f47a645b04438782f42d7cb8d48a4ec699abe4c9e0e770a573fabe0757bc7472c7b1a5477092"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x68, &(0x7f0000000a00)=@string={0x68, 0x3, "905ea7f505a3d8d6b942104912a84a3c62facb3da9f4dd8feec9a2666d0390581ddb6632d6d0aee7396cd2e68e0d5319f042cbf874f3e11ca9d362466aa3face3802be94a81b25bfbe3b0a616701b80fd0dead5b5db27a2a7e9842bc45ca1e69669f89d20629"}}]}) read$hidraw(0xffffffffffffffff, &(0x7f0000000fc0)=""/157, 0x9d) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001180)="c1721e422d1b4d7d9b2035e8b34487413113b1d7a7b6839e76d67b5d93cf4ec844cf48b6ac6122af7945f98f1050e45b81053380d9c6b2d66900c1f6c2f5b7a7111a493449710a82d0a96a62cbcd5a1b82045185e43c122aa6a751d1845b0bc01fe54b31178e439a2e184ba2074c95415f5a1eff39b70b4ea2caefd45d3fd50c05e37d26e3e8192d693e4162fdc312c228d13b79272c1ccf2d9acc20b66ab0c5935d9dffeb44480e8e8e2d29de1f24de2ecc6d6c5b0e443e3493f73c591c1b8075f38603a8472ffd2dbf5dc9cf49f2") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001280)="eb132e1ba4a133573b808f3d127f65e11be8cbb704de08ce69606f054196f6023e6a93c228ec89de604a8aa3a5231ef084ca37417806a50103b2b96930aacac42cf4bcf0f5b908d3f9e909c60f9e5c06622102fc8a53f7545f170aadbed2edbea84620e4d7d15b546452b8f065876a72d933aeade9de550e57591e82d8fcd4c9cb07021228481dd499d7853a427878a03d0c6c4b7d9c2df031c6783b") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x0, 0x6, 0xf7, {0xf7, 0x6, "f28a6ba4fa4ff868aaa63f5a2d99646883aff5dc8cdd211c0d4be1d000432e3ec7bcea7c955f7190fec2501cb5c1a7f5d4f00b5cb9415c39c1f8d14647c399c6858920fabc625079d5a2bef00c4b9bddda6a22e23714bd3e6fb700daacc483387fe2527aeaab68a947706669be4104c48c1d66854de0f6e5b4f87bcb3a1c2740091211ea1ec81fecd73e1064ae23e3b8d3005b53840b1b877a477603e2f7c092b09de2130a5286580a76503fba5de4169b4b5fd413ee8eebfb4055250c6fdc0802257bbc1fb0cad9c3ca38b7f965d773bc2eb8a0c72c9a8739d05698f4ffb3ba47996a793086707e3bbde1ee4f1c9ba03b9946e0fc"}}, &(0x7f0000001440)={0x0, 0x3, 0x5, @string={0x5, 0x3, "11135e"}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x40, 0x30, 0x6c, "029c21686e5b6fa9317dbe438342d9b5280f0498fc3035deca77e1de6305591f7588785115b399d27c0961e191881f425d7e340063ae416a316bb7d74195f0cc4774113697f6065a9625dd3a893462eed0282e4dad99a0ed2d4bb4738ee46b8b862d7478e53aa32fa8e5d887"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000015c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000001600)={0x20, 0x82, 0x1, "f8"}, &(0x7f0000001640)={0x20, 0x83, 0x3, "59815c"}, &(0x7f0000001680)={0x20, 0x84, 0x3, "a4cbc7"}, &(0x7f00000016c0)={0x20, 0x85, 0x3, "240bed"}}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000017c0)=""/26) r0 = syz_open_dev$evdev(&(0x7f0000001800), 0x5, 0x40000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001840)={0x1, 0xc, 0xd847, 0x7, "7655161b444efe40d51862051bd68af2da0b9a0f597efb9f11b8639d48d19816"}) r1 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x81, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "5c8671a3b7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0xd2, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x64}, @mdlm_detail={0x86, 0x24, 0x13, 0x0, "74d7722fa5be89ccbbe4b6342934d2f39b745f66b5b980ffa20e3459118ca95c71758cb70cb143d9cd213c5611ac8f4c974b1f7b7018471658c5bf00604b2fe77d12847c6c429214ac90f9729aaedf1ad3453486b9e38a64a489cfff3dd586d2583f99ae831a5933faa98dbdebe5287a9dda4dc9d24afceec66c6f9f9cd5716e7ff1"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xed, "5b2ac0e8326024f9fb7716fda4229a342afcceba261032fa7e9c7e86dc40f38702c4c10e565b051f33b2eebdd5f8187be902b04e96bec3eb10130dab988cdbe9baa6d4d4d78756517f73970d1fd6d238ec74bce1351a4d22aa045ac48d1844e5db923a50b40a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x4, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x2, 0x8, 0xf9, 0x20, 0x45}, 0x4d, &(0x7f0000001a80)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9c, 0x5, 0x2, 0xf000, 0xff, [0x30, 0xf0, 0x0, 0xc000, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x3, 0xc4b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c88026fb64936f70383318d32ba73d22"}]}, 0x5, [{0xe, &(0x7f0000001b00)=@string={0xe, 0x3, "69a2207f059833143787248e"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x6812}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3009}}, {0x15, &(0x7f0000001bc0)=@string={0x15, 0x3, "8a681f1639746becfe526ad1134941cbb29cad"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x20, 0x10, 0xcf, {0xcf, 0x11, "3df2a4137e2b881949a3de1f3c8cceb0196b9cf1af182585d4dd24892132dbc5d671f8f0d62b7d54c2874eeb224b96d48ebaf6a7cb1f659cd6dce97efcab767c5240b2c08768ed9eb8e51a7407f7f79265b94f67a494485746df09dbdaee319b2710258d51b2ce0c240d2b206ba4543fd026ef420cc44313842d40c1465bf85f3376d3d3a5c0f3e619201376e16138d7a09a9b854d7b3beefb7d90e3ff9d7d85f4cfadcdb9c00261cd408497e2c1264eb02160e3cacad7d7820083c7225ef50811eca69140d228cf9a7c3679b6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000001e00)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x80, 0x53}, @ptm_cap={0x3}]}}, &(0x7f0000001e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x60, 0x81, 0x8, "123d88ea", "20eaf275"}}, &(0x7f0000001e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x39, 0x60, 0x30, 0x80, 0x1f, 0xfc6, 0x3ff}}}, &(0x7f0000002380)={0x84, &(0x7f0000001f00)={0x40, 0xf, 0x87, "808bd3c93f61d71999d988d35a2f05229774f2b609bec616803d1491904a828a3ef49a30e99d4e5eec9dea1ef5b923cb63c2115d7ba48ceae3d5dffeee38b1a7ce544331f45c934c95f6c1e3cc7f8c5a6015fa5f8d943ff3cd197011f58e6cac9a8e42864b6109d351f5f2780390520c05aa8904013b44f94af1f91522cc400f20f805355e8300"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002040)={0x20, 0x0, 0x4}, &(0x7f0000002080)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f00000020c0)={0x40, 0x7, 0x2}, &(0x7f0000002100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0xb, 0x2, "0ee4"}, &(0x7f0000002180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000021c0)={0x40, 0x13, 0x6, @random="47ce8733f9e3"}, &(0x7f0000002200)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000002240)={0x40, 0x19, 0x2, "ed66"}, &(0x7f0000002280)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000022c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002300)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002340)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002ac0)={0x14, &(0x7f0000002980)={0x40, 0xe, 0xcd, {0xcd, 0xc, "65e7d54c1df8f90b29df4f68b90514c7bd338209b857ae1520d56d92998861de6c70ebfb0ac324285136ae274953949b9168a7ea842a2d1e141158563b38d0afb449d442ff9d9c7aa08421ea6f1f72e3cd474142505347fabd4aa81413817de835e94a3134d2f1027c38e6fd33d19d424d7f4d820c07f3726f0f3892d506d7de44025747e5df34b276eb4db2c7a081d0efdab3f459e3a1f8c4134aed2589c6594d09b6f012c3499254565d561802d1a6c2fe936edd6fb2852b3b1ee7327cf7f697c958cebf7f7ffc5b7f47"}}, &(0x7f0000002a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002b00)={0x40, 0xe, 0x45, "e506ab03578e86b779bae806e9f759f368020b487d0aee2f43154fa5344b7bb7fc0533594c28b2099d034d45fdc2aade548fd2d6b1fa9efd79a185e5b45f9f68f1905753b3"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x200, 0x0, 0x2, 0x8, 0x401, 0x80, 0x400, 0x20fa83d, 0x8, 0xfff8, 0x83dc, 0xbb0}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000002c80)={0x20, 0x83, 0x2}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000002d00)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002dc0)={0x3ff, 0x5, 0x2, 0x8001, 0x10000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002e00)={0x7f, 0x4, 0x8001, 0x955, 0x7, 0x5}) 20:37:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:37:02 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000a00)={0x0, 0x0, 0x1, "cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:37:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9639699551403181", "069c010000000100", '\x00', "498043b14786e9f9"}, 0x28) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000740), 0x1, 0x0, 0x15}}], 0x3ffffffffffff69, 0x0, 0x0) 20:37:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 20:37:02 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace(0x10, r0) wait4(r0, 0x0, 0x20000000, 0x0) [ 2797.692006][T14461] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2797.702039][T17997] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2797.952053][T17997] usb 6-1: Using ep0 maxpacket: 32 20:37:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf805, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003d000511d25a80648c63940d0300fc602f0035400c0003080200000037153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) 20:37:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf805, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003d000511d25a80648c63940d0300fc602f0035400c0003080200000037153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) [ 2798.096796][T18792] netlink: get zone limit has 8 unknown bytes [ 2798.122344][T14461] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2798.135014][T14461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2798.152366][T17997] usb 6-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 2798.161951][T14461] usb 1-1: config 0 descriptor?? [ 2798.170189][T17997] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2798.191552][T18794] netlink: get zone limit has 8 unknown bytes 20:37:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf805, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003d000511d25a80648c63940d0300fc602f0035400c0003080200000037153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) 20:37:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf805, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003d000511d25a80648c63940d0300fc602f0035400c0003080200000037153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) [ 2798.277240][T18796] netlink: get zone limit has 8 unknown bytes 20:37:03 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace(0x10, r0) wait4(r0, 0x0, 0x20000000, 0x0) [ 2798.346542][T18798] netlink: get zone limit has 8 unknown bytes [ 2798.352450][T17997] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2798.374287][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.402029][T17997] usb 6-1: Product: ࠉ [ 2798.408554][T17997] usb 6-1: Manufacturer: ꡬᬗ喖㭒几檣涕⍀楎緄扺歌䄩ⲍẀ芕푊불휛눾䤑䞐穓鋑ᗚ鰫ﱑ蓲㽉ꎧ䏷쀮䛑섮辂㧿㴮䠞ঞ鯅申텚鳌쯹鎛ጋ橦 [ 2798.457312][T17997] usb 6-1: SerialNumber: Ї [ 2798.842262][T17997] usb 6-1: 0:2 : does not exist [ 2798.852126][T14461] (unnamed net_device) (uninitialized): Assigned a random MAC address: f6:01:51:3b:41:9f [ 2798.883001][T17997] usb 6-1: USB disconnect, device number 64 [ 2798.883214][T14461] rtl8150 1-1:0.0: eth5: rtl8150 is detected [ 2798.906943][T18784] udevd[18784]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2798.920204][T14461] usb 1-1: USB disconnect, device number 49 20:37:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x251ad7}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:37:10 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 20:37:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x280, 0x8}) 20:37:10 executing program 5: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000002280)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 20:37:10 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000a00)={0x0, 0x0, 0x1, "cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:37:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace(0x10, r0) wait4(r0, 0x0, 0x20000000, 0x0) 20:37:10 executing program 5: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000002280)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 20:37:10 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 20:37:10 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 20:37:10 executing program 5: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000002280)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 20:37:10 executing program 4: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 20:37:11 executing program 5: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000002280)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) [ 2806.012330][T16825] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2806.442903][T16825] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2806.452327][T16825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.470698][T16825] usb 1-1: config 0 descriptor?? [ 2807.162452][T16825] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5e:73:50:7d:7b:3a [ 2807.186807][T16825] rtl8150 1-1:0.0: eth5: rtl8150 is detected [ 2807.206981][T16825] usb 1-1: USB disconnect, device number 50 20:37:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@ipv4_newnexthop={0x20, 0x15, 0x212342e048a6e71b, 0x0, 0x0, {0xa}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 20:37:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) 20:37:26 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2000000000000057, &(0x7f0000000000)=[{}]}, 0x8) 20:37:26 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300), 0x0, 0x0) 20:37:26 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace(0x10, r0) wait4(r0, 0x0, 0x20000000, 0x0) 20:37:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000a00)={0x0, 0x0, 0x1, "cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:37:26 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2000000000000057, &(0x7f0000000000)=[{}]}, 0x8) 20:37:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) [ 2821.471426][T18887] IPVS: length: 199 != 24 20:37:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) [ 2821.567969][T18894] IPVS: length: 199 != 24 20:37:26 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2000000000000057, &(0x7f0000000000)=[{}]}, 0x8) 20:37:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) [ 2821.614086][T18896] IPVS: length: 199 != 24 20:37:26 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2000000000000057, &(0x7f0000000000)=[{}]}, 0x8) [ 2821.683109][T18901] IPVS: length: 199 != 24 [ 2821.751992][T17996] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2822.132264][T17996] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2822.151704][T17996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2822.172749][T17996] usb 1-1: config 0 descriptor?? [ 2822.872340][T17996] (unnamed net_device) (uninitialized): Assigned a random MAC address: 46:34:8d:80:ba:05 [ 2822.889454][T17996] rtl8150 1-1:0.0: eth5: rtl8150 is detected [ 2822.903678][T17996] usb 1-1: USB disconnect, device number 51 20:37:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200037a372e100000000000002"], 0x24}}, 0x0) 20:37:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:39 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x812a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4282, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) 20:37:39 executing program 3: r0 = openat$pfkey(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) 20:37:39 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300), 0x0, 0x0) 20:37:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000a00)={0x0, 0x0, 0x1, "cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:37:39 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x88802, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'none'}, 0xc) [ 2834.076400][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 20:37:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:39 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x88802, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'none'}, 0xc) 20:37:39 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x88802, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'none'}, 0xc) [ 2834.200154][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 20:37:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:39 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x88802, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'unlock', ' ', 'none'}, 0xc) [ 2834.314141][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2834.333275][T17653] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2834.722883][T17653] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 2834.732168][T17653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2834.742234][T17653] usb 1-1: config 0 descriptor?? [ 2834.902062][ T25] audit: type=1800 audit(1645389459.979:6): pid=18921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2835.442323][T17653] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:99:9f:4b:df:27 [ 2835.458690][T17653] rtl8150 1-1:0.0: eth5: rtl8150 is detected [ 2835.472774][T17653] usb 1-1: USB disconnect, device number 52 [ 2835.853387][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.859710][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2848.654250][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:37:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200037a372e100000000000002"], 0x24}}, 0x0) 20:37:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:53 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x812a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4282, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) 20:37:53 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300), 0x0, 0x0) 20:37:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) [ 2848.833917][T18939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2848.878102][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2848.897831][T18938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 20:37:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:54 executing program 4: socket$bt_rfcomm(0x1f, 0x0, 0x3) [ 2848.994512][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 20:37:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 20:37:54 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xdc, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "cfd0c36ca03acbf3bbec9ae1ff55029eb55609813b99cb3238d8c9c42435"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c3e4bde362bca1ab96fdb7e100227243b3ddcebc997ec5e45d89170efad9"}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) [ 2849.046027][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:37:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) [ 2849.134035][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2849.187245][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2849.682193][ T25] audit: type=1800 audit(1645389474.759:7): pid=18950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 20:38:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200037a372e100000000000002"], 0x24}}, 0x0) 20:38:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xdc, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "cfd0c36ca03acbf3bbec9ae1ff55029eb55609813b99cb3238d8c9c42435"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c3e4bde362bca1ab96fdb7e100227243b3ddcebc997ec5e45d89170efad9"}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) 20:38:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') read$qrtrtun(r0, &(0x7f0000001040)=""/4098, 0x1002) 20:38:02 executing program 3: r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0/file0\x00'}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:38:02 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300), 0x0, 0x0) 20:38:02 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x812a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4282, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) [ 2857.153197][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:38:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xdc, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "cfd0c36ca03acbf3bbec9ae1ff55029eb55609813b99cb3238d8c9c42435"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c3e4bde362bca1ab96fdb7e100227243b3ddcebc997ec5e45d89170efad9"}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) 20:38:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') read$qrtrtun(r0, &(0x7f0000001040)=""/4098, 0x1002) 20:38:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') read$qrtrtun(r0, &(0x7f0000001040)=""/4098, 0x1002) 20:38:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xdc, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "cfd0c36ca03acbf3bbec9ae1ff55029eb55609813b99cb3238d8c9c42435"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c3e4bde362bca1ab96fdb7e100227243b3ddcebc997ec5e45d89170efad9"}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) 20:38:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') read$qrtrtun(r0, &(0x7f0000001040)=""/4098, 0x1002) 20:38:02 executing program 4: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2858.022355][ T25] audit: type=1800 audit(1645389483.099:8): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 20:38:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200037a372e100000000000002"], 0x24}}, 0x0) 20:38:10 executing program 4: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:38:10 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000952bb6201e738c1206ed000000010902220001080000000904000001010388000905050f08000000000725"], 0x0) 20:38:10 executing program 3: r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0/file0\x00'}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:38:10 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x812a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4282, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) 20:38:10 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) [ 2865.533174][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:38:10 executing program 4: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:38:10 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:10 executing program 4: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:38:10 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:10 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:10 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) [ 2865.852141][T17997] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2866.123576][T17997] usb 1-1: Using ep0 maxpacket: 32 [ 2866.262030][T17997] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2866.272998][T17997] usb 1-1: New USB device found, idVendor=731e, idProduct=128c, bcdDevice=ed.06 [ 2866.282566][T17997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.345213][T17997] usb 1-1: MIDIStreaming interface descriptor not found [ 2866.418983][ T25] audit: type=1800 audit(1645389491.499:9): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2866.547923][T17996] usb 1-1: USB disconnect, device number 53 [ 2873.934702][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:38:19 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000952bb6201e738c1206ed000000010902220001080000000904000001010388000905050f08000000000725"], 0x0) 20:38:19 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:19 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:19 executing program 3: r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0/file0\x00'}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 20:38:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60883a420030000000000000000000000000ff0c0000000000000000000000000000ff"], 0x0) 20:38:19 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 20:38:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60883a420030000000000000000000000000ff0c0000000000000000000000000000ff"], 0x0) 20:38:19 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:19 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) 20:38:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60883a420030000000000000000000000000ff0c0000000000000000000000000000ff"], 0x0) 20:38:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:19 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000640)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/167, 0xa7) [ 2874.391908][T17996] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2874.631963][T17996] usb 1-1: Using ep0 maxpacket: 32 [ 2874.752037][T17996] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2874.763169][T17996] usb 1-1: New USB device found, idVendor=731e, idProduct=128c, bcdDevice=ed.06 [ 2874.772890][T17996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2874.837887][T17996] usb 1-1: MIDIStreaming interface descriptor not found [ 2875.060423][T17996] usb 1-1: USB disconnect, device number 54 20:38:20 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000952bb6201e738c1206ed000000010902220001080000000904000001010388000905050f08000000000725"], 0x0) 20:38:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getpriority(0x0, 0x0) 20:38:20 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60883a420030000000000000000000000000ff0c0000000000000000000000000000ff"], 0x0) 20:38:20 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:20 executing program 3: r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0/file0\x00'}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 2875.901934][T16825] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2876.151945][T16825] usb 1-1: Using ep0 maxpacket: 32 [ 2876.282193][T16825] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2876.293251][T16825] usb 1-1: New USB device found, idVendor=731e, idProduct=128c, bcdDevice=ed.06 [ 2876.302967][T16825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2876.375757][T16825] usb 1-1: MIDIStreaming interface descriptor not found [ 2876.602215][T14461] usb 1-1: USB disconnect, device number 55 20:38:32 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000380)={{r2}}) 20:38:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:32 executing program 5: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) 20:38:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {0x6}]}) 20:38:32 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000952bb6201e738c1206ed000000010902220001080000000904000001010388000905050f08000000000725"], 0x0) 20:38:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:38:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:38:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:38:32 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105001, 0x0) [ 2887.685760][ T25] audit: type=1326 audit(1645389512.769:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19075 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ee0549 code=0x0 [ 2887.861937][T17997] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2888.101894][T17997] usb 1-1: Using ep0 maxpacket: 32 [ 2888.222050][T17997] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2888.233302][T17997] usb 1-1: New USB device found, idVendor=731e, idProduct=128c, bcdDevice=ed.06 [ 2888.242945][T17997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.294568][T17997] usb 1-1: MIDIStreaming interface descriptor not found [ 2888.520296][T14461] usb 1-1: USB disconnect, device number 56 20:38:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x23, &(0x7f0000000480)=@assoc_value={r2}, 0x8) 20:38:41 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)) 20:38:41 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:38:41 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105001, 0x0) 20:38:41 executing program 5: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) 20:38:41 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) 20:38:42 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105001, 0x0) 20:38:42 executing program 3: syz_clone(0x24800080, 0x0, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 3: syz_clone(0x24800080, 0x0, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:42 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105001, 0x0) 20:38:42 executing program 5: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) [ 2897.302992][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.309371][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:38:56 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) 20:38:56 executing program 5: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) 20:38:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:56 executing program 3: syz_clone(0x24800080, 0x0, 0x0, 0x0, 0x0, 0x0) 20:38:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x23, &(0x7f0000000480)=@assoc_value={r2}, 0x8) 20:38:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:56 executing program 3: syz_clone(0x24800080, 0x0, 0x0, 0x0, 0x0, 0x0) 20:38:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfb7f66, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:38:56 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 20:38:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8902, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @dev}, @ethernet={0x0, @remote}, @ax25={0x3, @bcast}}) 20:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'rose0\x00', &(0x7f0000000000)=@ethtool_channels}) 20:39:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@hyper}) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 20:39:07 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 20:39:07 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 20:39:07 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, {0x4}, {0x228, 0x8, 0x1}, {0x7}, {0x0, 0x8}, 0x0, 0x100, 0x0, 0x6d, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xbbd, 0x5, 0x10, 0x1, 0x3}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x6238, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r3}}, 0x38) 20:39:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x23, &(0x7f0000000480)=@assoc_value={r2}, 0x8) 20:39:07 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 20:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb7}]}]}, 0x28}}, 0x0) 20:39:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@hyper}) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 20:39:07 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 20:39:07 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 20:39:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb7}]}]}, 0x28}}, 0x0) 20:39:07 executing program 2: openat$null(0xffffff9c, 0x0, 0x40902, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="cfe9945a4a100a2e67cc251deccb8aba82da5e1277858043bdde9a5c6da2e1") sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4) 20:39:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x23, &(0x7f0000000480)=@assoc_value={r2}, 0x8) 20:39:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb7}]}]}, 0x28}}, 0x0) 20:39:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@hyper}) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 20:39:17 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x60, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x6, 0x7, 0x8, 0x2}, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2800020710020cf2ff0f1c10081324275ba13aeafcff30000000ffbf"], 0x7, [{0x62, &(0x7f0000000180)=@string={0x62, 0x3, "9dfb55d1f9001cd321bc08b7bc5e729b1640f67023971e6d24a09552d5e309d2b26f74a9edbad5634db36fb550715253937fed9d2dc55cc68538a51a3d392fc3d1a46c98df5475447e2a1eb76221ba392520b4136873185eb00bc70fc9017135"}}, {0xcf, &(0x7f00000002c0)=@string={0xcf, 0x3, "27f9f55a531d7c8476293aa3932dbcb119b213fadcf21cb5a52ebaeb04dc6bbc955be50859f4c84108bcc25fa505339a3c1c053aadd1a35f681baf05728e1b39013935e91b56a6bd871e7c866f1cf3a476b0f06dd28497b0adccb3b018c0231b95aecd4e3a161e9149ec2022a715bca1cfcc9ba61a5fd0dea9695f325bc8502914b54da7d9177be105be053345afd9b821751ae0ede74b14966b5965550526cb69d9afa14ed5785d531e0c94c481a4b3fddf8850d6ef31f9c40416ebb220749833494c9d28a7b6e8f079235c24"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "8bd2eabf239bf273418751d2804c0e0a19cff382333ba7ae7d3d01cb80338607cc60b6250765f9911ee8d3616ff3324399cbfba0d8c0fc36d651532a7fc6c37e2ef59a321e53d0f15025696bded013e2a0abbfc07f4834af257c31a02dca9e734ebdee865f78506bebe4d8fb620cd3e0cbba5e4751f24797bf40a9fce6cae042c42a02f91085407c214e42346463790ee25a04b839177ed4cdd52a4f7c812b8f24a61d074bacfac8fe626c6d302a684e83fbd444ef4e"}}, {0x4b, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0xbb, &(0x7f0000000e40)=@string={0xbb, 0x3, "4ced51ba7e61a02e375635d519e4f5304a46ac1997fe9c0c2459c7440fbafe4b6f91bff1b600a99ba3ea57256bf21130db7a6d6fdcb43bc5e95b6cef6794de016d3e24c62e84317311f42ed5d42de340fd21578fd3edd8d094d4b7babacc91c0649b0fa5c17427494bb062c109e2f8a5faa17d0eb9e00a68a696075230193ba3b075ed792eb5007541d3dd00b74c068a90e8280cd45bb4a7771be3bab7d4aff77b98e3c17384f37e2f97b6a584d9e7940014f29e2fdbd2e9e6"}}, {0xc6, &(0x7f0000000f40)=@string={0xc6, 0x3, "dc2c678491b8d66d9955d0ffdb99c38b3d1bf2d07c372b139c088cdf66f6b132176d69975efe2ef1b7cbe24629924d9a776f5af6f95b567b216e42aec6a7eed31440b14f6cff3a2b9cc291b3ce00420733cf36e488dfd62aaf2e8d6e75f128cccdff20a30f93a56a78cb64c9323efd5d5467905d4987e05b02250998076c110d87ce75e33e383f040cb76c32d61b986cce322ef02134e62f15350dae273d7948b78d8722bc4b384a7d4ca5d4521d47cb71aba26d2bd4372835b930247efe7ee9664e463a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c7a}}]}) timerfd_create(0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000840), 0x1000006742, 0x54001) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000880)={0x101, 0x0, 0x3, 0x6, 0xef}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, {0xa, 0x4e21, 0x0, @loopback, 0x10000}, 0x6, [0x6, 0x5, 0x0, 0x0, 0x0, 0x5e, 0xfb23, 0xf7d]}, 0x5c) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000008c0)=""/18, &(0x7f0000000900)=0x12) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 20:39:17 executing program 2: openat$null(0xffffff9c, 0x0, 0x40902, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="cfe9945a4a100a2e67cc251deccb8aba82da5e1277858043bdde9a5c6da2e1") sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4) 20:39:17 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 20:39:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb7}]}]}, 0x28}}, 0x0) 20:39:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@hyper}) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 20:39:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="abd79f039852494e66838d616dc2d7c8", 0x10) 20:39:17 executing program 2: openat$null(0xffffff9c, 0x0, 0x40902, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="cfe9945a4a100a2e67cc251deccb8aba82da5e1277858043bdde9a5c6da2e1") sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4) 20:39:17 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) 20:39:17 executing program 2: openat$null(0xffffff9c, 0x0, 0x40902, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="cfe9945a4a100a2e67cc251deccb8aba82da5e1277858043bdde9a5c6da2e1") sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4) [ 2932.732238][T14461] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2933.002699][T14461] usb 1-1: Using ep0 maxpacket: 32 [ 2933.233506][T14461] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2933.243728][T14461] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 2933.254036][T14461] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2933.662000][T14461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2933.671080][T14461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.679896][T14461] usb 1-1: Product: 튋뿪鬣珲蝁퉑䲀਎켙苳㬳꺧㵽쬁㎀ކ惌▶攇釹懓䌲쮙ꃻ샘㛼凖⩓왿练㊚匞═歩탞ꮠ삿䡿꼴簥ꀱ쨭玞뵎蛮硟歐ﯘౢ뫋䝞靇䂿ﲩ쫦䋠⫄車蔐籀両㑂捤๹嫢렄᜹푾헍伪腼輫꘤ܝ걋죺拾浬⨰乨ﮃ䓔仯 [ 2933.708842][T14461] usb 1-1: Manufacturer: 蠟嫵ᵓ葼⥶ꌺⶓ놼눙﨓딜⺥뱫宕ࣥ䇈밈忂֥騳᰼㨅톭徣᭨֯蹲㤛㤁嘛붦ẇ虼ᱯꓳ끶淰蓒낗청낳쀘ᬣ꺕仍ᘺ鄞∠ᖧꆼ쳏ꚛ弚榩㉟졛⥐디ꝍ៙븅㌅꽅룙甡ᑋ殖教Օ쬦ꆯ핎嵸ṓ鐌臄뎤傈櫓ӄ₲顴䤳鵌Ꜩ称尣 [ 2933.762269][T19206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2933.769383][T19206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2934.264777][T14461] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 3 proto 2 vid 0x0525 pid 0xA4A8 [ 2934.280886][T14461] usb 1-1: USB disconnect, device number 57 [ 2934.302653][T14461] usblp0: removed 20:39:35 executing program 5: r0 = userfaultfd(0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x11, &(0x7f0000000000)) 20:39:35 executing program 3: openat$damon_monitor_on(0xffffff9c, &(0x7f0000000080), 0x101040, 0x0) write$damon_monitor_on(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/time_for_children\x00') 20:39:35 executing program 4: clock_getres(0x2, 0x0) 20:39:35 executing program 2: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) 20:39:35 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x60, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x6, 0x7, 0x8, 0x2}, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2800020710020cf2ff0f1c10081324275ba13aeafcff30000000ffbf"], 0x7, [{0x62, &(0x7f0000000180)=@string={0x62, 0x3, "9dfb55d1f9001cd321bc08b7bc5e729b1640f67023971e6d24a09552d5e309d2b26f74a9edbad5634db36fb550715253937fed9d2dc55cc68538a51a3d392fc3d1a46c98df5475447e2a1eb76221ba392520b4136873185eb00bc70fc9017135"}}, {0xcf, &(0x7f00000002c0)=@string={0xcf, 0x3, "27f9f55a531d7c8476293aa3932dbcb119b213fadcf21cb5a52ebaeb04dc6bbc955be50859f4c84108bcc25fa505339a3c1c053aadd1a35f681baf05728e1b39013935e91b56a6bd871e7c866f1cf3a476b0f06dd28497b0adccb3b018c0231b95aecd4e3a161e9149ec2022a715bca1cfcc9ba61a5fd0dea9695f325bc8502914b54da7d9177be105be053345afd9b821751ae0ede74b14966b5965550526cb69d9afa14ed5785d531e0c94c481a4b3fddf8850d6ef31f9c40416ebb220749833494c9d28a7b6e8f079235c24"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "8bd2eabf239bf273418751d2804c0e0a19cff382333ba7ae7d3d01cb80338607cc60b6250765f9911ee8d3616ff3324399cbfba0d8c0fc36d651532a7fc6c37e2ef59a321e53d0f15025696bded013e2a0abbfc07f4834af257c31a02dca9e734ebdee865f78506bebe4d8fb620cd3e0cbba5e4751f24797bf40a9fce6cae042c42a02f91085407c214e42346463790ee25a04b839177ed4cdd52a4f7c812b8f24a61d074bacfac8fe626c6d302a684e83fbd444ef4e"}}, {0x4b, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0xbb, &(0x7f0000000e40)=@string={0xbb, 0x3, "4ced51ba7e61a02e375635d519e4f5304a46ac1997fe9c0c2459c7440fbafe4b6f91bff1b600a99ba3ea57256bf21130db7a6d6fdcb43bc5e95b6cef6794de016d3e24c62e84317311f42ed5d42de340fd21578fd3edd8d094d4b7babacc91c0649b0fa5c17427494bb062c109e2f8a5faa17d0eb9e00a68a696075230193ba3b075ed792eb5007541d3dd00b74c068a90e8280cd45bb4a7771be3bab7d4aff77b98e3c17384f37e2f97b6a584d9e7940014f29e2fdbd2e9e6"}}, {0xc6, &(0x7f0000000f40)=@string={0xc6, 0x3, "dc2c678491b8d66d9955d0ffdb99c38b3d1bf2d07c372b139c088cdf66f6b132176d69975efe2ef1b7cbe24629924d9a776f5af6f95b567b216e42aec6a7eed31440b14f6cff3a2b9cc291b3ce00420733cf36e488dfd62aaf2e8d6e75f128cccdff20a30f93a56a78cb64c9323efd5d5467905d4987e05b02250998076c110d87ce75e33e383f040cb76c32d61b986cce322ef02134e62f15350dae273d7948b78d8722bc4b384a7d4ca5d4521d47cb71aba26d2bd4372835b930247efe7ee9664e463a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c7a}}]}) timerfd_create(0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000840), 0x1000006742, 0x54001) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000880)={0x101, 0x0, 0x3, 0x6, 0xef}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, {0xa, 0x4e21, 0x0, @loopback, 0x10000}, 0x6, [0x6, 0x5, 0x0, 0x0, 0x0, 0x5e, 0xfb23, 0xf7d]}, 0x5c) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000008c0)=""/18, &(0x7f0000000900)=0x12) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 20:39:35 executing program 1: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000040)) unshare(0x40020000) 20:39:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:35 executing program 5: r0 = userfaultfd(0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x11, &(0x7f0000000000)) 20:39:35 executing program 4: clock_getres(0x2, 0x0) 20:39:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:39:35 executing program 4: clock_getres(0x2, 0x0) 20:39:35 executing program 5: r0 = userfaultfd(0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x11, &(0x7f0000000000)) 20:39:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:39:35 executing program 4: clock_getres(0x2, 0x0) 20:39:35 executing program 5: r0 = userfaultfd(0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x11, &(0x7f0000000000)) [ 2950.382032][T17653] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2950.661905][T17653] usb 1-1: Using ep0 maxpacket: 32 [ 2950.862169][T17653] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2950.872241][T17653] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 2950.882587][T17653] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2951.302147][T17653] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2951.312843][T17653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.320871][T17653] usb 1-1: Product: 튋뿪鬣珲蝁퉑䲀਎켙苳㬳꺧㵽쬁㎀ކ惌▶攇釹懓䌲쮙ꃻ샘㛼凖⩓왿练㊚匞═歩탞ꮠ삿䡿꼴簥ꀱ쨭玞뵎蛮硟歐ﯘౢ뫋䝞靇䂿ﲩ쫦䋠⫄車蔐籀両㑂捤๹嫢렄᜹푾헍伪腼輫꘤ܝ걋죺拾浬⨰乨ﮃ䓔仯 [ 2951.349401][T17653] usb 1-1: Manufacturer: 蠟嫵ᵓ葼⥶ꌺⶓ놼눙﨓딜⺥뱫宕ࣥ䇈밈忂֥騳᰼㨅톭徣᭨֯蹲㤛㤁嘛붦ẇ虼ᱯꓳ끶淰蓒낗청낳쀘ᬣ꺕仍ᘺ鄞∠ᖧꆼ쳏ꚛ弚榩㉟졛⥐디ꝍ៙븅㌅꽅룙甡ᑋ殖教Օ쬦ꆯ핎嵸ṓ鐌臄뎤傈櫓ӄ₲顴䤳鵌Ꜩ称尣 [ 2951.412836][T19242] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2951.420256][T19242] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2951.935892][T17653] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 3 proto 2 vid 0x0525 pid 0xA4A8 [ 2951.950525][T17653] usb 1-1: USB disconnect, device number 58 [ 2951.976730][T17653] usblp0: removed 20:39:37 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x60, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x6, 0x7, 0x8, 0x2}, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2800020710020cf2ff0f1c10081324275ba13aeafcff30000000ffbf"], 0x7, [{0x62, &(0x7f0000000180)=@string={0x62, 0x3, "9dfb55d1f9001cd321bc08b7bc5e729b1640f67023971e6d24a09552d5e309d2b26f74a9edbad5634db36fb550715253937fed9d2dc55cc68538a51a3d392fc3d1a46c98df5475447e2a1eb76221ba392520b4136873185eb00bc70fc9017135"}}, {0xcf, &(0x7f00000002c0)=@string={0xcf, 0x3, "27f9f55a531d7c8476293aa3932dbcb119b213fadcf21cb5a52ebaeb04dc6bbc955be50859f4c84108bcc25fa505339a3c1c053aadd1a35f681baf05728e1b39013935e91b56a6bd871e7c866f1cf3a476b0f06dd28497b0adccb3b018c0231b95aecd4e3a161e9149ec2022a715bca1cfcc9ba61a5fd0dea9695f325bc8502914b54da7d9177be105be053345afd9b821751ae0ede74b14966b5965550526cb69d9afa14ed5785d531e0c94c481a4b3fddf8850d6ef31f9c40416ebb220749833494c9d28a7b6e8f079235c24"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "8bd2eabf239bf273418751d2804c0e0a19cff382333ba7ae7d3d01cb80338607cc60b6250765f9911ee8d3616ff3324399cbfba0d8c0fc36d651532a7fc6c37e2ef59a321e53d0f15025696bded013e2a0abbfc07f4834af257c31a02dca9e734ebdee865f78506bebe4d8fb620cd3e0cbba5e4751f24797bf40a9fce6cae042c42a02f91085407c214e42346463790ee25a04b839177ed4cdd52a4f7c812b8f24a61d074bacfac8fe626c6d302a684e83fbd444ef4e"}}, {0x4b, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0xbb, &(0x7f0000000e40)=@string={0xbb, 0x3, "4ced51ba7e61a02e375635d519e4f5304a46ac1997fe9c0c2459c7440fbafe4b6f91bff1b600a99ba3ea57256bf21130db7a6d6fdcb43bc5e95b6cef6794de016d3e24c62e84317311f42ed5d42de340fd21578fd3edd8d094d4b7babacc91c0649b0fa5c17427494bb062c109e2f8a5faa17d0eb9e00a68a696075230193ba3b075ed792eb5007541d3dd00b74c068a90e8280cd45bb4a7771be3bab7d4aff77b98e3c17384f37e2f97b6a584d9e7940014f29e2fdbd2e9e6"}}, {0xc6, &(0x7f0000000f40)=@string={0xc6, 0x3, "dc2c678491b8d66d9955d0ffdb99c38b3d1bf2d07c372b139c088cdf66f6b132176d69975efe2ef1b7cbe24629924d9a776f5af6f95b567b216e42aec6a7eed31440b14f6cff3a2b9cc291b3ce00420733cf36e488dfd62aaf2e8d6e75f128cccdff20a30f93a56a78cb64c9323efd5d5467905d4987e05b02250998076c110d87ce75e33e383f040cb76c32d61b986cce322ef02134e62f15350dae273d7948b78d8722bc4b384a7d4ca5d4521d47cb71aba26d2bd4372835b930247efe7ee9664e463a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c7a}}]}) timerfd_create(0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000840), 0x1000006742, 0x54001) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000880)={0x101, 0x0, 0x3, 0x6, 0xef}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, {0xa, 0x4e21, 0x0, @loopback, 0x10000}, 0x6, [0x6, 0x5, 0x0, 0x0, 0x0, 0x5e, 0xfb23, 0xf7d]}, 0x5c) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000008c0)=""/18, &(0x7f0000000900)=0x12) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 2952.712033][T17996] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2952.951942][T17996] usb 1-1: Using ep0 maxpacket: 32 [ 2953.151987][T17996] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2953.171070][T17996] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 2953.181250][T17996] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2953.552250][T17996] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2953.561359][T17996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.581145][T17996] usb 1-1: Product: 튋뿪鬣珲蝁퉑䲀਎켙苳㬳꺧㵽쬁㎀ކ惌▶攇釹懓䌲쮙ꃻ샘㛼凖⩓왿练㊚匞═歩탞ꮠ삿䡿꼴簥ꀱ쨭玞뵎蛮硟歐ﯘౢ뫋䝞靇䂿ﲩ쫦䋠⫄車蔐籀両㑂捤๹嫢렄᜹푾헍伪腼輫꘤ܝ걋죺拾浬⨰乨ﮃ䓔仯 [ 2953.621178][T17996] usb 1-1: Manufacturer: 蠟嫵ᵓ葼⥶ꌺⶓ놼눙﨓딜⺥뱫宕ࣥ䇈밈忂֥騳᰼㨅톭徣᭨֯蹲㤛㤁嘛붦ẇ虼ᱯꓳ끶淰蓒낗청낳쀘ᬣ꺕仍ᘺ鄞∠ᖧꆼ쳏ꚛ弚榩㉟졛⥐디ꝍ៙븅㌅꽅룙甡ᑋ殖教Օ쬦ꆯ핎嵸ṓ鐌臄뎤傈櫓ӄ₲顴䤳鵌Ꜩ称尣 [ 2953.682356][T19267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2953.689322][T19267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2954.184811][T17996] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 3 proto 2 vid 0x0525 pid 0xA4A8 [ 2954.200741][T17996] usb 1-1: USB disconnect, device number 59 [ 2954.226270][T17996] usblp0: removed [ 2958.736180][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.743041][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 20:39:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:39:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x60, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x6, 0x7, 0x8, 0x2}, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2800020710020cf2ff0f1c10081324275ba13aeafcff30000000ffbf"], 0x7, [{0x62, &(0x7f0000000180)=@string={0x62, 0x3, "9dfb55d1f9001cd321bc08b7bc5e729b1640f67023971e6d24a09552d5e309d2b26f74a9edbad5634db36fb550715253937fed9d2dc55cc68538a51a3d392fc3d1a46c98df5475447e2a1eb76221ba392520b4136873185eb00bc70fc9017135"}}, {0xcf, &(0x7f00000002c0)=@string={0xcf, 0x3, "27f9f55a531d7c8476293aa3932dbcb119b213fadcf21cb5a52ebaeb04dc6bbc955be50859f4c84108bcc25fa505339a3c1c053aadd1a35f681baf05728e1b39013935e91b56a6bd871e7c866f1cf3a476b0f06dd28497b0adccb3b018c0231b95aecd4e3a161e9149ec2022a715bca1cfcc9ba61a5fd0dea9695f325bc8502914b54da7d9177be105be053345afd9b821751ae0ede74b14966b5965550526cb69d9afa14ed5785d531e0c94c481a4b3fddf8850d6ef31f9c40416ebb220749833494c9d28a7b6e8f079235c24"}}, {0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "8bd2eabf239bf273418751d2804c0e0a19cff382333ba7ae7d3d01cb80338607cc60b6250765f9911ee8d3616ff3324399cbfba0d8c0fc36d651532a7fc6c37e2ef59a321e53d0f15025696bded013e2a0abbfc07f4834af257c31a02dca9e734ebdee865f78506bebe4d8fb620cd3e0cbba5e4751f24797bf40a9fce6cae042c42a02f91085407c214e42346463790ee25a04b839177ed4cdd52a4f7c812b8f24a61d074bacfac8fe626c6d302a684e83fbd444ef4e"}}, {0x4b, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0xbb, &(0x7f0000000e40)=@string={0xbb, 0x3, "4ced51ba7e61a02e375635d519e4f5304a46ac1997fe9c0c2459c7440fbafe4b6f91bff1b600a99ba3ea57256bf21130db7a6d6fdcb43bc5e95b6cef6794de016d3e24c62e84317311f42ed5d42de340fd21578fd3edd8d094d4b7babacc91c0649b0fa5c17427494bb062c109e2f8a5faa17d0eb9e00a68a696075230193ba3b075ed792eb5007541d3dd00b74c068a90e8280cd45bb4a7771be3bab7d4aff77b98e3c17384f37e2f97b6a584d9e7940014f29e2fdbd2e9e6"}}, {0xc6, &(0x7f0000000f40)=@string={0xc6, 0x3, "dc2c678491b8d66d9955d0ffdb99c38b3d1bf2d07c372b139c088cdf66f6b132176d69975efe2ef1b7cbe24629924d9a776f5af6f95b567b216e42aec6a7eed31440b14f6cff3a2b9cc291b3ce00420733cf36e488dfd62aaf2e8d6e75f128cccdff20a30f93a56a78cb64c9323efd5d5467905d4987e05b02250998076c110d87ce75e33e383f040cb76c32d61b986cce322ef02134e62f15350dae273d7948b78d8722bc4b384a7d4ca5d4521d47cb71aba26d2bd4372835b930247efe7ee9664e463a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c7a}}]}) timerfd_create(0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000840), 0x1000006742, 0x54001) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000880)={0x101, 0x0, 0x3, 0x6, 0xef}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, {0xa, 0x4e21, 0x0, @loopback, 0x10000}, 0x6, [0x6, 0x5, 0x0, 0x0, 0x0, 0x5e, 0xfb23, 0xf7d]}, 0x5c) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000008c0)=""/18, &(0x7f0000000900)=0x12) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 20:39:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:39:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:39:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x6b4, &(0x7f0000000200)="c737e051", 0x4) 20:39:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) [ 2967.252079][T14461] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2967.502064][T14461] usb 1-1: Using ep0 maxpacket: 32 [ 2967.702829][T14461] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2967.718849][T14461] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 2967.739997][T14461] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2968.123815][T14461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2968.137801][T14461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.154858][T14461] usb 1-1: Product: 튋뿪鬣珲蝁퉑䲀਎켙苳㬳꺧㵽쬁㎀ކ惌▶攇釹懓䌲쮙ꃻ샘㛼凖⩓왿练㊚匞═歩탞ꮠ삿䡿꼴簥ꀱ쨭玞뵎蛮硟歐ﯘౢ뫋䝞靇䂿ﲩ쫦䋠⫄車蔐籀両㑂捤๹嫢렄᜹푾헍伪腼輫꘤ܝ걋죺拾浬⨰乨ﮃ䓔仯 [ 2968.210686][T14461] usb 1-1: Manufacturer: 蠟嫵ᵓ葼⥶ꌺⶓ놼눙﨓딜⺥뱫宕ࣥ䇈밈忂֥騳᰼㨅톭徣᭨֯蹲㤛㤁嘛붦ẇ虼ᱯꓳ끶淰蓒낗청낳쀘ᬣ꺕仍ᘺ鄞∠ᖧꆼ쳏ꚛ弚榩㉟졛⥐디ꝍ៙븅㌅꽅룙甡ᑋ殖教Օ쬦ꆯ핎嵸ṓ鐌臄뎤傈櫓ӄ₲顴䤳鵌Ꜩ称尣 [ 2968.282363][T19277] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2968.289982][T19277] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2968.826812][T14461] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 3 proto 2 vid 0x0525 pid 0xA4A8 [ 2968.850006][T14461] usb 1-1: USB disconnect, device number 60 [ 2968.876275][T14461] usblp0: removed 20:40:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:40:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:40:01 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) r1 = gettid() process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, &(0x7f0000000280)=[{&(0x7f0000001e40)=""/4107, 0x7ffff000}], 0x1, 0x0) 20:40:01 executing program 4: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 20:40:01 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000100)="0000000000000001ffffff7ae30e97861f4104bfeacd1f63dd65dd5709667390f2c00ea5e2a4edf7", 0x28, r0) 20:40:01 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) r1 = gettid() process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, &(0x7f0000000280)=[{&(0x7f0000001e40)=""/4107, 0x7ffff000}], 0x1, 0x0) 20:40:01 executing program 4: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 20:40:01 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000100)="0000000000000001ffffff7ae30e97861f4104bfeacd1f63dd65dd5709667390f2c00ea5e2a4edf7", 0x28, r0) 20:40:01 executing program 5: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:40:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:01 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000100)="0000000000000001ffffff7ae30e97861f4104bfeacd1f63dd65dd5709667390f2c00ea5e2a4edf7", 0x28, r0) 20:40:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 20:40:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:12 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000100)="0000000000000001ffffff7ae30e97861f4104bfeacd1f63dd65dd5709667390f2c00ea5e2a4edf7", 0x28, r0) 20:40:12 executing program 5: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:40:12 executing program 4: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 20:40:12 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) r1 = gettid() process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, &(0x7f0000000280)=[{&(0x7f0000001e40)=""/4107, 0x7ffff000}], 0x1, 0x0) 20:40:12 executing program 4: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 20:40:12 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) r1 = gettid() process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, &(0x7f0000000280)=[{&(0x7f0000001e40)=""/4107, 0x7ffff000}], 0x1, 0x0) 20:40:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, &(0x7f00000000c0)) 20:40:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, &(0x7f00000000c0)) 20:40:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 5: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:40:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x2000000}) 20:40:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, &(0x7f00000000c0)) 20:40:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000800)=[{r0}], 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x0) 20:40:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, &(0x7f00000000c0)) 20:40:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x14, &(0x7f0000000840)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc}]}}) 20:40:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 20:40:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2}}}}]}, 0x88}}, 0x0) 20:40:21 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/82, 0x52) [ 2996.742525][T17998] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2997.202034][T17998] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2997.392050][T17998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2997.401108][T17998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2997.409692][T17998] usb 5-1: Product: syz [ 2997.414236][T17998] usb 5-1: Manufacturer: syz [ 2997.418849][T17998] usb 5-1: SerialNumber: syz [ 2997.483909][T17998] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2997.695654][T17996] usb 5-1: USB disconnect, device number 50 20:40:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 20:40:33 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x14, &(0x7f0000000840)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc}]}}) 20:40:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x2000000}) 20:40:33 executing program 5: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:40:33 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/82, 0x52) 20:40:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2}}}}]}, 0x88}}, 0x0) 20:40:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 20:40:33 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/82, 0x52) 20:40:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2}}}}]}, 0x88}}, 0x0) 20:40:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 20:40:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2}}}}]}, 0x88}}, 0x0) 20:40:33 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/82, 0x52) 20:40:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) [ 3009.052137][T17996] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3009.491951][T17996] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3009.661964][T17996] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3009.671068][T17996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.679695][T17996] usb 5-1: Product: syz [ 3009.684224][T17996] usb 5-1: Manufacturer: syz [ 3009.688834][T17996] usb 5-1: SerialNumber: syz [ 3009.733031][T17996] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 3009.977664][T17996] usb 5-1: USB disconnect, device number 51 20:40:35 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x14, &(0x7f0000000840)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc}]}}) [ 3010.781969][T17998] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3011.222030][T17998] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3011.392243][T17998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3011.401335][T17998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.409704][T17998] usb 5-1: Product: syz [ 3011.415110][T17998] usb 5-1: Manufacturer: syz [ 3011.419728][T17998] usb 5-1: SerialNumber: syz [ 3011.462933][T17998] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 3011.706108][T17998] usb 5-1: USB disconnect, device number 52 20:40:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x2000000}) 20:40:44 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:40:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 20:40:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 20:40:44 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:44 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x14, &(0x7f0000000840)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc}]}}) 20:40:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 20:40:44 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:44 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:44 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:40:44 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) [ 3019.441877][T14461] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3019.881928][T14461] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3020.051971][T14461] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3020.061115][T14461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.069950][T14461] usb 5-1: Product: syz [ 3020.074589][T14461] usb 5-1: Manufacturer: syz [ 3020.079304][T14461] usb 5-1: SerialNumber: syz [ 3020.137387][T14461] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 3020.172851][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.179186][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.370887][T14461] usb 5-1: USB disconnect, device number 53 20:40:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x2000000}) 20:40:56 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:56 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:40:56 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:56 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:40:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@dev}}}]}, 0x38}}, 0x0) 20:40:56 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 20:40:56 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:40:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@dev}}}]}, 0x38}}, 0x0) 20:40:56 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:40:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) 20:40:56 executing program 5: r0 = memfd_create(&(0x7f00000007c0)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\xf6\xb2\xcc@\xe6A\xaa\xae\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\x1e\xe9\xd7\x8b\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6l\xde\xd0\xca*(\x00\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) 20:41:09 executing program 5: r0 = memfd_create(&(0x7f00000007c0)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\xf6\xb2\xcc@\xe6A\xaa\xae\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\x1e\xe9\xd7\x8b\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6l\xde\xd0\xca*(\x00\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) 20:41:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0xfffffffffffffff7, 0x0) 20:41:09 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 20:41:09 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:41:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@dev}}}]}, 0x38}}, 0x0) 20:41:09 executing program 5: r0 = memfd_create(&(0x7f00000007c0)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\xf6\xb2\xcc@\xe6A\xaa\xae\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\x1e\xe9\xd7\x8b\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6l\xde\xd0\xca*(\x00\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) 20:41:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0xfffffffffffffff7, 0x0) 20:41:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@dev}}}]}, 0x38}}, 0x0) 20:41:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0xfffffffffffffff7, 0x0) 20:41:09 executing program 5: r0 = memfd_create(&(0x7f00000007c0)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\xf6\xb2\xcc@\xe6A\xaa\xae\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\x1e\xe9\xd7\x8b\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6l\xde\xd0\xca*(\x00\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) 20:41:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:09 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 20:41:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0xfffffffffffffff7, 0x0) 20:41:21 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @local, {[@noop, @noop, @lsrr={0x83, 0xb, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x59, 0x0, [{0x0, 0x6, "8edc03e3"}, {0x0, 0x10, "c3e0474f91dac969355326ee0d8c"}, {0x0, 0x4, "89a9"}, {0x0, 0x4, "39d7"}, {0x0, 0xc, "afe45699efc19bf4a105"}, {0x0, 0x10, "93e7bc396061a6f8ab85c62d3150"}, {0x0, 0xc, "374900bfcf3f4861ac63"}, {0x0, 0xd, "d20fc1241bd4cd7fa26ed4"}]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}]}}}}}}}, 0x0) 20:41:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:21 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:21 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:21 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @local, {[@noop, @noop, @lsrr={0x83, 0xb, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x59, 0x0, [{0x0, 0x6, "8edc03e3"}, {0x0, 0x10, "c3e0474f91dac969355326ee0d8c"}, {0x0, 0x4, "89a9"}, {0x0, 0x4, "39d7"}, {0x0, 0xc, "afe45699efc19bf4a105"}, {0x0, 0x10, "93e7bc396061a6f8ab85c62d3150"}, {0x0, 0xc, "374900bfcf3f4861ac63"}, {0x0, 0xd, "d20fc1241bd4cd7fa26ed4"}]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}]}}}}}}}, 0x0) 20:41:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 20:41:21 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 20:41:21 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 20:41:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 20:41:30 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @local, {[@noop, @noop, @lsrr={0x83, 0xb, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x59, 0x0, [{0x0, 0x6, "8edc03e3"}, {0x0, 0x10, "c3e0474f91dac969355326ee0d8c"}, {0x0, 0x4, "89a9"}, {0x0, 0x4, "39d7"}, {0x0, 0xc, "afe45699efc19bf4a105"}, {0x0, 0x10, "93e7bc396061a6f8ab85c62d3150"}, {0x0, 0xc, "374900bfcf3f4861ac63"}, {0x0, 0xd, "d20fc1241bd4cd7fa26ed4"}]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}]}}}}}}}, 0x0) 20:41:30 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 20:41:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/239, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 20:41:30 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:30 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:30 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 20:41:30 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @local, {[@noop, @noop, @lsrr={0x83, 0xb, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x59, 0x0, [{0x0, 0x6, "8edc03e3"}, {0x0, 0x10, "c3e0474f91dac969355326ee0d8c"}, {0x0, 0x4, "89a9"}, {0x0, 0x4, "39d7"}, {0x0, 0xc, "afe45699efc19bf4a105"}, {0x0, 0x10, "93e7bc396061a6f8ab85c62d3150"}, {0x0, 0xc, "374900bfcf3f4861ac63"}, {0x0, 0xd, "d20fc1241bd4cd7fa26ed4"}]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}]}}}}}}}, 0x0) 20:41:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/239, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 20:41:30 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 20:41:30 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/239, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 20:41:30 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000100)='./file0\x00', 0x9be59e18ce0d42d4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004", 0x25}], 0x1) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 20:41:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 20:41:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/239, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 20:41:40 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000100)='./file0\x00', 0x9be59e18ce0d42d4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004", 0x25}], 0x1) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 20:41:40 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8d, 0x11, 0x7b, 0x8, 0x152d, 0x578, 0x5ba1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x3a, 0x49}}]}}]}}, 0x0) 20:41:40 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000bc1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 20:41:40 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000100)='./file0\x00', 0x9be59e18ce0d42d4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004", 0x25}], 0x1) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 20:41:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000100)='./file0\x00', 0x9be59e18ce0d42d4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004", 0x25}], 0x1) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 20:41:41 executing program 4: syz_usb_connect$uac1(0x0, 0x87, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "00f510ec5c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}]}}, 0x0) [ 3076.051962][T17997] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3076.301899][T17997] usb 3-1: Using ep0 maxpacket: 8 [ 3076.421955][T17653] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3076.582143][T17997] usb 3-1: New USB device found, idVendor=152d, idProduct=0578, bcdDevice=5b.a1 [ 3076.599277][T17997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.623159][T17997] usb 3-1: Product: syz [ 3076.633269][T17997] usb 3-1: Manufacturer: syz [ 3076.643200][T17997] usb 3-1: SerialNumber: syz [ 3076.666271][T17997] usb 3-1: config 0 descriptor?? [ 3076.711841][T17653] usb 5-1: Using ep0 maxpacket: 32 [ 3076.723471][T17997] usb-storage 3-1:0.0: USB Mass Storage device detected [ 3076.747741][T17997] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0578: 1000000 [ 3076.872385][T17653] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3076.888642][T17653] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3076.914913][T17653] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3076.929649][T17997] usb 3-1: USB disconnect, device number 48 [ 3077.122810][T17653] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3077.141316][T17653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x9, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) [ 3077.169459][T17653] usb 5-1: Product: syz [ 3077.184171][T17653] usb 5-1: Manufacturer: syz [ 3077.216537][T17653] usb 5-1: SerialNumber: syz 20:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x9, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) [ 3077.574431][T17653] usb 5-1: 0:2 : does not exist [ 3077.607633][T17653] usb 5-1: USB disconnect, device number 54 [ 3077.638817][T19570] udevd[19570]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3081.623434][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.629867][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.052990][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.059440][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.493065][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.499394][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 3222.411956][ T26] INFO: task syz-executor.5:19552 blocked for more than 143 seconds. [ 3222.420063][ T26] Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 3222.451722][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3222.460448][ T26] task:syz-executor.5 state:D stack:28016 pid:19552 ppid: 3627 flags:0x20004004 [ 3222.501890][ T26] Call Trace: [ 3222.505205][ T26] [ 3222.508153][ T26] __schedule+0xa94/0x4910 [ 3222.531758][ T26] ? io_schedule_timeout+0x180/0x180 [ 3222.537139][ T26] schedule+0xd2/0x260 [ 3222.541228][ T26] schedule_preempt_disabled+0xf/0x20 [ 3222.569897][ T26] __mutex_lock+0xa32/0x12f0 [ 3222.581964][ T26] ? vhost_net_stop+0x142/0x270 [ 3222.586963][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 3222.620852][ T26] ? vhost_net_buf_unproduce+0x16/0x560 [ 3222.626734][ T26] ? do_lock_file_wait+0x330/0x330 [ 3222.641688][ T26] vhost_net_stop+0x142/0x270 [ 3222.646518][ T26] vhost_net_release+0x9c/0x2d0 [ 3222.651385][ T26] ? vhost_net_stop+0x270/0x270 [ 3222.666002][ T26] ? fcntl_setlk+0xd00/0xd00 [ 3222.671141][ T26] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 3222.691747][ T26] ? ima_file_free+0xb6/0x420 [ 3222.696560][ T26] __fput+0x286/0x9f0 [ 3222.703506][ T26] ? vhost_net_stop+0x270/0x270 [ 3222.708399][ T26] task_work_run+0xdd/0x1a0 [ 3222.731848][ T26] exit_to_user_mode_prepare+0x27e/0x290 [ 3222.737610][ T26] syscall_exit_to_user_mode+0x19/0x60 [ 3222.751782][ T26] __do_fast_syscall_32+0x72/0xf0 [ 3222.756854][ T26] do_fast_syscall_32+0x2f/0x70 [ 3222.769779][ T26] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3222.776263][ T26] RIP: 0023:0xf6e8d549 [ 3222.780343][ T26] RSP: 002b:00000000f751eb20 EFLAGS: 00000286 ORIG_RAX: 0000000000000006 [ 3222.791702][ T26] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002 [ 3222.799746][ T26] RDX: 0000000000000000 RSI: 00000000f6fc5000 RDI: 0000000000000000 [ 3222.823922][ T26] RBP: 00000000f6fef6c0 R08: 0000000000000000 R09: 0000000000000000 [ 3222.841749][ T26] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3222.849838][ T26] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3222.870799][ T26] [ 3222.877362][ T26] INFO: task syz-executor.0:19572 blocked for more than 143 seconds. [ 3222.901839][ T26] Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 3222.909490][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3222.928630][ T26] task:syz-executor.0 state:D stack:28016 pid:19572 ppid: 17309 flags:0x20004004 [ 3222.951716][ T26] Call Trace: [ 3222.955048][ T26] [ 3222.957987][ T26] __schedule+0xa94/0x4910 [ 3222.971721][ T26] ? io_schedule_timeout+0x180/0x180 [ 3222.979750][ T26] schedule+0xd2/0x260 [ 3222.991787][ T26] schedule_preempt_disabled+0xf/0x20 [ 3222.997190][ T26] __mutex_lock+0xa32/0x12f0 [ 3223.011689][ T26] ? vhost_net_stop+0x142/0x270 [ 3223.016599][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 3223.032819][ T26] ? vhost_net_buf_unproduce+0x16/0x560 [ 3223.038409][ T26] ? do_lock_file_wait+0x330/0x330 [ 3223.061819][ T26] vhost_net_stop+0x142/0x270 [ 3223.066654][ T26] vhost_net_release+0x9c/0x2d0 [ 3223.071519][ T26] ? vhost_net_stop+0x270/0x270 [ 3223.081730][ T26] ? fcntl_setlk+0xd00/0xd00 [ 3223.086543][ T26] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 3223.101663][ T26] ? ima_file_free+0xb6/0x420 [ 3223.106375][ T26] __fput+0x286/0x9f0 [ 3223.110372][ T26] ? vhost_net_stop+0x270/0x270 [ 3223.131808][ T26] task_work_run+0xdd/0x1a0 [ 3223.136359][ T26] exit_to_user_mode_prepare+0x27e/0x290 [ 3223.153936][ T26] syscall_exit_to_user_mode+0x19/0x60 [ 3223.159445][ T26] __do_fast_syscall_32+0x72/0xf0 [ 3223.184557][ T26] do_fast_syscall_32+0x2f/0x70 [ 3223.189466][ T26] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3223.211996][ T26] RIP: 0023:0xf6f5b549 [ 3223.216103][ T26] RSP: 002b:00000000f75ecb20 EFLAGS: 00000286 ORIG_RAX: 0000000000000006 [ 3223.241838][ T26] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002 [ 3223.249848][ T26] RDX: 0000000000000000 RSI: 00000000f7093000 RDI: 0000000000000000 [ 3223.271743][ T26] RBP: 00000000f70bd6c0 R08: 0000000000000000 R09: 0000000000000000 [ 3223.279753][ T26] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3223.309784][ T26] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3223.318028][ T26] [ 3223.321080][ T26] [ 3223.321080][ T26] Showing all locks held in the system: [ 3223.347681][ T26] 1 lock held by khungtaskd/26: [ 3223.352885][ T26] #0: ffffffff8bb84360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 3223.381830][ T26] 2 locks held by getty/3274: [ 3223.386665][ T26] #0: ffff888023355098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3223.411784][ T26] #1: ffffc90002b662e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcf0/0x1230 [ 3223.428591][ T26] 2 locks held by kworker/u4:19/6134: [ 3223.434096][ T26] 1 lock held by syz-executor.5/19552: [ 3223.439555][ T26] #0: ffff88804df00218 (&vq->mutex){+.+.}-{3:3}, at: vhost_net_stop+0x142/0x270 [ 3223.469888][ T26] 1 lock held by vhost-19553/19555: [ 3223.484953][ T26] 1 lock held by syz-executor.0/19572: [ 3223.490453][ T26] #0: ffff88807d160218 (&vq->mutex){+.+.}-{3:3}, at: vhost_net_stop+0x142/0x270 [ 3223.518732][ T26] 1 lock held by vhost-19573/19575: [ 3223.524471][ T26] [ 3223.526806][ T26] ============================================= [ 3223.526806][ T26] [ 3223.551807][ T26] NMI backtrace for cpu 1 [ 3223.556168][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 3223.566064][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3223.576122][ T26] Call Trace: [ 3223.579420][ T26] [ 3223.582352][ T26] dump_stack_lvl+0xcd/0x134 [ 3223.587045][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 3223.592343][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 3223.597611][ T26] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 3223.603636][ T26] watchdog+0xc1d/0xf50 [ 3223.607810][ T26] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3223.613812][ T26] kthread+0x2e9/0x3a0 [ 3223.617892][ T26] ? kthread_complete_and_exit+0x40/0x40 [ 3223.623624][ T26] ret_from_fork+0x1f/0x30 [ 3223.628101][ T26] [ 3223.631771][ T26] Sending NMI from CPU 1 to CPUs 0: [ 3223.636994][ C0] NMI backtrace for cpu 0 [ 3223.637006][ C0] CPU: 0 PID: 18240 Comm: kworker/u4:2 Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 3223.637032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3223.637046][ C0] Workqueue: events_unbound toggle_allocation_gate [ 3223.637126][ C0] RIP: 0010:kasan_report+0x12/0x100 [ 3223.637178][ C0] Code: 48 89 e7 e8 60 fd ff ff 48 83 c4 08 5d 41 5c c3 0f 1f 84 00 00 00 00 00 41 56 41 55 41 54 55 53 48 83 ec 30 9c 41 5c 0f 01 ca <65> 48 8b 04 25 00 70 02 00 8b 80 68 15 00 00 85 c0 0f 85 a9 00 00 [ 3223.637200][ C0] RSP: 0018:ffffc900058ff958 EFLAGS: 00000082 [ 3223.637216][ C0] RAX: ffff7fffffffffff RBX: ffffffff8d9441ec RCX: ffffffff812b2a40 [ 3223.637232][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00002aaaaaaab3e9 [ 3223.637245][ C0] RBP: ffffffff8f1a04ab R08: 0000000000000001 R09: 00002aaaaaaab3ed [ 3223.637260][ C0] R10: fffffbfff1e34095 R11: 000000000000003f R12: 0000000000000082 [ 3223.637274][ C0] R13: 00002aaaaaaab3e9 R14: 00000000000003ed R15: ffffffff8bcb43e0 [ 3223.637289][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 3223.637311][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3223.637326][ C0] CR2: 000000c0021af018 CR3: 00000001406f5000 CR4: 00000000003506f0 [ 3223.637341][ C0] Call Trace: [ 3223.637345][ C0] [ 3223.637353][ C0] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3223.637398][ C0] ? trace_tlb_flush+0x126/0x1b0 [ 3223.637425][ C0] kasan_check_range+0x13d/0x180 [ 3223.637447][ C0] memcpy+0x39/0x60 [ 3223.637466][ C0] ? __kmalloc_track_caller+0x139/0x430 [ 3223.637492][ C0] __text_poke+0x490/0x8c0 [ 3223.637535][ C0] ? text_poke_loc_init+0x450/0x450 [ 3223.637564][ C0] text_poke_bp_batch+0x25b/0x6f0 [ 3223.637589][ C0] ? __kmalloc_track_caller+0x139/0x430 [ 3223.637616][ C0] ? do_sync_core+0x20/0x20 [ 3223.637639][ C0] ? __jump_label_patch+0x159/0x1b0 [ 3223.637666][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3223.637695][ C0] ? __jump_label_update+0x351/0x400 [ 3223.637720][ C0] text_poke_finish+0x16/0x30 [ 3223.637744][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 3223.637769][ C0] jump_label_update+0x32f/0x410 [ 3223.637793][ C0] static_key_enable_cpuslocked+0x1b1/0x260 [ 3223.637817][ C0] static_key_enable+0x16/0x20 [ 3223.637837][ C0] toggle_allocation_gate+0x100/0x390 [ 3223.637860][ C0] ? lock_release+0x720/0x720 [ 3223.637885][ C0] ? wake_up_kfence_timer+0x20/0x20 [ 3223.637908][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 3223.637939][ C0] process_one_work+0x9ac/0x1650 [ 3223.637966][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3223.637990][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 3223.638015][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 3223.638046][ C0] worker_thread+0x657/0x1110 [ 3223.638072][ C0] ? process_one_work+0x1650/0x1650 [ 3223.638094][ C0] kthread+0x2e9/0x3a0 [ 3223.638119][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 3223.638147][ C0] ret_from_fork+0x1f/0x30 [ 3223.638182][ C0] [ 3223.944692][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 3223.951561][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.17.0-rc4-syzkaller-00241-g7f25f0412c9e #0 [ 3223.961461][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3223.971518][ T26] Call Trace: [ 3223.974801][ T26] [ 3223.977732][ T26] dump_stack_lvl+0xcd/0x134 [ 3223.982337][ T26] panic+0x2b0/0x6dd [ 3223.986272][ T26] ? __warn_printk+0xf3/0xf3 [ 3223.990876][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 3223.996097][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 3224.001483][ T26] ? nmi_trigger_cpumask_backtrace+0x1c9/0x230 [ 3224.007668][ T26] ? watchdog.cold+0x130/0x158 [ 3224.012453][ T26] watchdog.cold+0x141/0x158 [ 3224.017068][ T26] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3224.023254][ T26] kthread+0x2e9/0x3a0 [ 3224.027330][ T26] ? kthread_complete_and_exit+0x40/0x40 [ 3224.032977][ T26] ret_from_fork+0x1f/0x30 [ 3224.037418][ T26] [ 3224.040591][ T26] Kernel Offset: disabled [ 3224.044912][ T26] Rebooting in 86400 seconds..