0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x3fffeec, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x4a, 0x20385655, 0x1, @discrete={0x501, 0x8}}) 13:43:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100), 0x0) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r6, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="080000011000050700000000000000f700000000044e6ef485d25678fb2fb95cdf95613e3b4767f6639674004072e8e93141001f75ec956ce18d531d54c01bab2c34a45d96f793bc88a2279a0236d2f9d912f515f8e6518675d4a65fb49c3ce4be8eba550100000000000000de8429039defabd4db12f84420000000ee95084f113cae0fefbed584611088399e6e48ec3fe9e548b1052580fcd096b4ee5508e7d2928836ee8f0a437e95eb2c9bd8afad0cd15d24db112b4bc581f56a0487c2a66046f2e17d", @ANYRESOCT=r1, @ANYRESOCT=r6], 0x48}}, 0x0) recvmmsg(r4, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 13:43:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x141000, 0x19f) mkdirat(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x400, 0x0, 0x6, 0x0, 0x3, 0x75, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000200), 0x1}, 0x12295, 0x0, 0x80000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000380)=[0x0, 0x1], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xff643a90a978bda3}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) r2 = syz_open_dev$midi(0x0, 0x957, 0x80082) listen(r1, 0x200000000002) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000100)=0x4) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x1000000, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) prctl$PR_SET_FP_MODE(0x2d, 0x1) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2896b4a90efa4998) dup(0xffffffffffffffff) 13:43:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000800050000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x80) 13:43:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='bbr\x00', 0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="36de22e5e00d0e4220b5eb971080008fce9cb6928b803976abd8dcd01bdac6af46b3568468a9ee363a5c95d973b83f17f14091303b4815eade8379ec5c673d59480ded7a117a2aedc3b662597c39a3dd4c023850d51b6f45b28b0d0badd82f50699b0aaa71ac9c0497ce98e5e55a1ffce686eb65d71b3d13b8bd24e95373fa41b8952f74dcd96dfb95f10a08e3ecf7b116515eafb63d5be34a6345292b1082b209e285854003aca78233e9ee6c7103393684ecd7f1646865c9e37cd1edc83a5beb", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf253000000008000300", @ANYRES32=r2, @ANYBLOB="0600050000e192d0c9e6a2dd3f00e82e820f2cddb382f6b5e070bf0ef3017416bded66d646574d7a81919f315c5d9d9a3554189d69c28057e2263f7ef1f2f965b8aefc5df50cdf75c0849604"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={0x0, 0xff}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x3fffeec, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x4a, 0x20385655, 0x1, @discrete={0x501, 0x8}}) [ 338.679908][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:43:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="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", 0x660, r0) keyctl$read(0xb, r1, &(0x7f0000001540)=""/4096, 0x1000) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00)=[{&(0x7f00000001c0)="0c2de850a7388d9d96536d2b0e3ae5bd357b774ac8d429c26c38de4162f20455d0d10a52450243c091738705d30139c93f583e48d5d208b081737d946b0a006845ed307907822d6893ddbe33ad470da624d83d7c23a723fc8fbe0bace2e2cc8fd356c8cf7d63ca44ae359ed178dc28b15eb0b1e86c6243654841da4bb880e3b7afb3619c9d516995cc85737e9e1b1d211895ea6924aad3fa1e9c244e71957a1344ff2ce1da4ef9b1db7ba52adcd4", 0xae}, {&(0x7f0000000280)="1fe624f198d62c173242dcbbf42b62bcf72a3455cc58b4a9ac28ccb845612b1ecb95cee609246363f26af83b026c585ebce7a6bbb3ab4e933f27a5880fa6030cdad4b3d0f81a643fb1ff0e2fe550d6487515875b46fb0bcbd8a9e79189ce129661899fa0b308e05fb34179290569457063e3d15795a52d9b0fb2b55fafc1c762fa5c211c26cc62c005d508b5", 0x8c}, {&(0x7f0000000780)="8391157afb3935b78acea6ddad4dcb584355dfd54a74f661a7bc36fe0a2c3e6a3867172ac0fb5cfc6315d20dd0d8a891e3f41d2667788dc9229e1c4785d059d11d1d1c82bada4d40f000148967242b92842baf5e3738adc29e01dacbeadf8551242c786ecda37ad8be910602", 0x6c}, {&(0x7f0000000880)="fd3629975ac9bbd7c75595c3d282adf8c8ef96ff41cfe8294daefa4a6ebd8d3d753884641cfab69021da77d6100b5a15af94a2f35b59f84093fc1863e70b4acfd2cb71e3c861bae28330eb53826895daa477c51225a8799b35391f692809005128711d804f0fb11066f3ee8a6b5bc0bd846c1e89cf6919c3fd3231", 0x7b}, {&(0x7f0000000100)="4447bf8b48fcd1da2938c59db3dbc591811d77478f032787d988a2d6bd5260ec", 0x20}], 0x5, r1) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000340), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000380)={'veth0_to_team\x00'}) r4 = syz_io_uring_setup(0x3d7c, &(0x7f00000003c0)={0x0, 0x34dd, 0x1, 0x0, 0x2f7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000bc0)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1b) bind$can_j1939(r3, &(0x7f0000000080), 0x18) 13:43:32 executing program 4: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x40000000002, 0x3, 0x2) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100, 0x80000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x1, 0x8000, 0x2, 0x0, 0x17, "de2d425629478b19f45c5cb6d95c0922c34431"}) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x1a75db206c22733, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x8ec4, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x596dca98d982f31e}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0xa71973e3d82e5d, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf85439e6, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x7bfa13d48b47c56b) bind$can_raw(r1, &(0x7f0000000040), 0x10) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x280080, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @remote}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) 13:43:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x7}, 0x0, 0x6c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xbb, 0x1c8500) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x1, @remote, 0x8}, {0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0xff, [0xffff8a04, 0x4, 0xfffffff0, 0x8, 0x7, 0x1f, 0x4, 0x9]}, 0x5c) read(r0, &(0x7f00000001c0)=""/98, 0x62) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'vlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x96000000, 0x0) 13:43:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100), 0x0) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r6, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="080000011000050700000000000000f700000000044e6ef485d25678fb2fb95cdf95613e3b4767f6639674004072e8e93141001f75ec956ce18d531d54c01bab2c34a45d96f793bc88a2279a0236d2f9d912f515f8e6518675d4a65fb49c3ce4be8eba550100000000000000de8429039defabd4db12f84420000000ee95084f113cae0fefbed584611088399e6e48ec3fe9e548b1052580fcd096b4ee5508e7d2928836ee8f0a437e95eb2c9bd8afad0cd15d24db112b4bc581f56a0487c2a66046f2e17d", @ANYRESOCT=r1, @ANYRESOCT=r6], 0x48}}, 0x0) recvmmsg(r4, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 13:43:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100), 0x0) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r6, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="080000011000050700000000000000f700000000044e6ef485d25678fb2fb95cdf95613e3b4767f6639674004072e8e93141001f75ec956ce18d531d54c01bab2c34a45d96f793bc88a2279a0236d2f9d912f515f8e6518675d4a65fb49c3ce4be8eba550100000000000000de8429039defabd4db12f84420000000ee95084f113cae0fefbed584611088399e6e48ec3fe9e548b1052580fcd096b4ee5508e7d2928836ee8f0a437e95eb2c9bd8afad0cd15d24db112b4bc581f56a0487c2a66046f2e17d", @ANYRESOCT=r1, @ANYRESOCT=r6], 0x48}}, 0x0) recvmmsg(r4, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 13:43:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100), 0x0) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r6, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="080000011000050700000000000000f700000000044e6ef485d25678fb2fb95cdf95613e3b4767f6639674004072e8e93141001f75ec956ce18d531d54c01bab2c34a45d96f793bc88a2279a0236d2f9d912f515f8e6518675d4a65fb49c3ce4be8eba550100000000000000de8429039defabd4db12f84420000000ee95084f113cae0fefbed584611088399e6e48ec3fe9e548b1052580fcd096b4ee5508e7d2928836ee8f0a437e95eb2c9bd8afad0cd15d24db112b4bc581f56a0487c2a66046f2e17d", @ANYRESOCT=r1, @ANYRESOCT=r6], 0x48}}, 0x0) 13:43:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x208, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001000810804259becdb4cb92e0a48b1371400000069bd6efb2503eaff0d001400020200bf050005001201", 0x2e}], 0x1}, 0x0) 13:43:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x7}, 0x0, 0x6c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xbb, 0x1c8500) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x1, @remote, 0x8}, {0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0xff, [0xffff8a04, 0x4, 0xfffffff0, 0x8, 0x7, 0x1f, 0x4, 0x9]}, 0x5c) read(r0, &(0x7f00000001c0)=""/98, 0x62) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'vlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x96000000, 0x0) 13:43:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x7}, 0x0, 0x6c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xbb, 0x1c8500) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x1, @remote, 0x8}, {0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0xff, [0xffff8a04, 0x4, 0xfffffff0, 0x8, 0x7, 0x1f, 0x4, 0x9]}, 0x5c) read(r0, &(0x7f00000001c0)=""/98, 0x62) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'vlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x96000000, 0x0) 13:43:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:43:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 343.675088][T11999] device batadv0 entered promiscuous mode 13:43:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x81, 0x11bb}, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000d29c43ddb3ab85866eff95df565591566c4372d7cef38cbf6f28ae6991fdf626c4a287853436a4122e54a477630c39ef2c5c8462f14a1f7bd1cb9c401732934b10b02f0fc96c9527c7e59bde5e37af", @ANYBLOB="000425bd7000fbdbdf2501000000300001801400030000000000000006000100000000800800050002000000060001000a0000003c00028006000b000a0000000800030002000000080009006300000005000d000100000008000800c000000008000800080000000800050005000000", @ANYRESHEX=r0, @ANYRES64, @ANYRES64=r2, @ANYRES32=r3], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) sched_getscheduler(r3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 344.177004][T12007] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:43:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 346.229839][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 13:43:39 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000003d2e32cfb778940000f90890f40e92fc4322582d87dbff13637be61e", @ANYRES16=r5, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff01000000000000000000000000000108000a0000000000060002000100000014001f00fe8000000000000000000000000000aa"], 0xc0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x800000000, 0x0) 13:43:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="890751f4c48715fc8f4571a656eeb5495352f226b485eaa4e1dfb206991fd8e3f59267a76e98b8c9c8c7ffb5d77582167b597fa16a9b7757c51667526a0cc1d7c9225c2bc405071f543435a3e6d933fe9e5586a60de8113b821c4c23380f08cd700ed6b872aeff838f93852d5969a64dcd2c5d1f1faf65576de6d1774e6bfe80a2136a86090db5da685c15cef6232473480fd8a5117360d6b09d3a273d39e64caed5b5b47f8ba570a477cd80a7b1b0d9d08145b51fcd1ef40c31b3c08befeb1a2954f4a562f32338034af1faff56b10979c784eaf09f151243da30bc4f26f3bd55a4b8", 0xe3, 0x40, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:43:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:41 executing program 3: socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_pgetevents(0x0, 0x5, 0x9, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)={0x77359400}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x7]}, 0x8}) r3 = socket(0x40000000002, 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x80, 0x800) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7100fcdbdf250200000008000700ac1414bb14000500fc0000000000000000000000000000011a0001002936de556b566d7479c14362328026285c21242307000000080030c5c0470000"], 0x54}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0x6, 0x29, 0x6}}, 0xa) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000040)=0x1) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000200)=@in={0x2, 0x4e23, @remote}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, 0x0, 0xfa38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x7a, 0xd9, &(0x7f0000000400)="de05d90d060a305682d7dfce82480baaff9f53dd3748add5452c2888e26a3887d5489c67bd246ffd61f62906836923a9cd63637c8172cab25767e99f5f9ff7c340a10b1fa972bb6a2943e799a934374b73cf65fe1f0842d17b5b307f4dbf86dc347e9450129bbef07d55c2ea1c35d9dc3deecc6ecefe9643d514", &(0x7f0000000480)=""/217, 0xffffffff, 0x0, 0x78, 0x48, &(0x7f0000000580)="b3738e7d7309abd59de8f7b736bd387f48ab58cabf2a32040aa86b7f0b4ab73d97b05edf69b88c2612e97e30e66a9baa3969a1a8113428a46def13d1380d78008951024f63ecda6c529567f795b6de381a21c86e4999163a63f095abacd1ac572d75d40cc3b6db85bf02b981755889ab0d71b30c6c843dd0", &(0x7f0000000600)="778dd430beba0cbc7a2468a6f884c84c0a23b086ef8a39ef89cab6184643d5464910a656ffbf1294c6b4202c5eb3217b6e1023c3b7085967ba70fc8b41f24a25378ca85676f804ee", 0x1, 0x6}, 0x48) 13:43:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x9}, 0x0, 0x100000001, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x51) open(&(0x7f0000000200)='./bus\x00', 0x101000, 0x192) dup3(r1, r0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000400)={0x4, 0x28, [0x1, 0x1, 0xb32, 0x2a], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400020000b14000328bd7000fbdbdf2508000180010010000800010001000000080001000200000008003f0004000000080003000100000008003f0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x10) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000380)={0x6, {0x1, 0x1ff, 0x9, 0x8}}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="801048d7a3ab80afc1cb785e932faeb0959100cd98d6ee7b95e4b64c5995005439c260c23b87a7d8d46da20c376b35308cef3cb513015ee306ffd04da102f793c4c3def0ece0ef6804e1096e1c4fd24f5a96e2d2cc3f5352d328b43d48aee0ffd4f9718c459b31a51e209447fd40a976674d51be2fbecc416d2865b2c2df8946de4fc25bb2046e615b34ae65395bca2d45a25b3183f53eff2f2bb5af06706c2ebdb4c557031166df9591ef37f22c8d58c24a30c726bbb59d7844b76591", @ANYRES16=0x0, @ANYBLOB="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"], 0x15c}}, 0x8044) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=""/63, 0x3f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x400) lsetxattr$security_ima(0x0, &(0x7f0000000440)='security.ima\x00', 0x0, 0x0, 0x3) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 13:43:41 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x127000, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005c00128009000100766c616e000000004c0002800600010000000000340003800c00010001010000000000800c00010004000000060000000c00010003000000050000000c00010000040000030000000c0002001f0000001300000008000500", @ANYRES32=0x0, @ANYBLOB="8e986cee80fd755644af36d979ba1b0944a8b9f6dcc1d6dee4e7a5bba24e020ba97421c2d3e25c8228a5977209dcd34ad60272666d82077155d4e69956921fb43e7812069e6d20c8e406abd350429aa0959c92dfd54d9ecca649650518b50103cdfb900895641338d256781116c70a0f7efc78c0840841fa11b6d826e287869101bbb6", @ANYRES32=0x0, @ANYBLOB="2c00128009000100626f6e64000000001c00028008000200", @ANYRES32=0x0, @ANYBLOB="08000f000000000005000e0000000000"], 0xb8}}, 0x4000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x9, 0x2}) 13:43:41 executing program 3: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xab38733d914354e6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket$pppoe(0x18, 0x1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x13, "29cdd84c8b2fe0aa899e62c24b"}, 0xf, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 13:43:42 executing program 3: r0 = inotify_init() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002200)={0xffffffdd, 0x0, {}, {0xffffffffffffffff}, 0x0, 0x9}) geteuid() geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002940)={r1, 0x6, 0x3ff, 0x5}) ustat(0x2, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000002a00)={'ip6_vti0\x00', &(0x7f0000002980)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x9, 0x0, 0x20, @local, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x10, 0x0, 0x300000}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) 13:43:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:42 executing program 3: r0 = inotify_init() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002200)={0xffffffdd, 0x0, {}, {0xffffffffffffffff}, 0x0, 0x9}) geteuid() geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002940)={r1, 0x6, 0x3ff, 0x5}) ustat(0x2, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000002a00)={'ip6_vti0\x00', &(0x7f0000002980)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x9, 0x0, 0x20, @local, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x10, 0x0, 0x300000}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) [ 350.043242][T12033] syz-executor.0 (12033) used greatest stack depth: 22448 bytes left 13:43:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x81, 0x11bb}, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000d29c43ddb3ab85866eff95df565591566c4372d7cef38cbf6f28ae6991fdf626c4a287853436a4122e54a477630c39ef2c5c8462f14a1f7bd1cb9c401732934b10b02f0fc96c9527c7e59bde5e37af", @ANYBLOB="000425bd7000fbdbdf2501000000300001801400030000000000000006000100000000800800050002000000060001000a0000003c00028006000b000a0000000800030002000000080009006300000005000d000100000008000800c000000008000800080000000800050005000000", @ANYRESHEX=r0, @ANYRES64, @ANYRES64=r2, @ANYRES32=r3], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) sched_getscheduler(r3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13:43:43 executing program 3: r0 = inotify_init() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002200)={0xffffffdd, 0x0, {}, {0xffffffffffffffff}, 0x0, 0x9}) geteuid() geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002940)={r1, 0x6, 0x3ff, 0x5}) ustat(0x2, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000002a00)={'ip6_vti0\x00', &(0x7f0000002980)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x9, 0x0, 0x20, @local, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x10, 0x0, 0x300000}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) 13:43:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="890751f4c48715fc8f4571a656eeb5495352f226b485eaa4e1dfb206991fd8e3f59267a76e98b8c9c8c7ffb5d77582167b597fa16a9b7757c51667526a0cc1d7c9225c2bc405071f543435a3e6d933fe9e5586a60de8113b821c4c23380f08cd700ed6b872aeff838f93852d5969a64dcd2c5d1f1faf65576de6d1774e6bfe80a2136a86090db5da685c15cef6232473480fd8a5117360d6b09d3a273d39e64caed5b5b47f8ba570a477cd80a7b1b0d9d08145b51fcd1ef40c31b3c08befeb1a2954f4a562f32338034af1faff56b10979c784eaf09f151243da30bc4f26f3bd55a4b8", 0xe3, 0x40, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:43:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="890751f4c48715fc8f4571a656eeb5495352f226b485eaa4e1dfb206991fd8e3f59267a76e98b8c9c8c7ffb5d77582167b597fa16a9b7757c51667526a0cc1d7c9225c2bc405071f543435a3e6d933fe9e5586a60de8113b821c4c23380f08cd700ed6b872aeff838f93852d5969a64dcd2c5d1f1faf65576de6d1774e6bfe80a2136a86090db5da685c15cef6232473480fd8a5117360d6b09d3a273d39e64caed5b5b47f8ba570a477cd80a7b1b0d9d08145b51fcd1ef40c31b3c08befeb1a2954f4a562f32338034af1faff56b10979c784eaf09f151243da30bc4f26f3bd55a4b8", 0xe3, 0x40, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 350.913124][T12079] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.017191][T12079] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:43:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r2, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r2, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="c7", 0x1}], 0x1, 0x0, 0x0, 0xa6ff8034}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="f3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="a4", 0x1}, {&(0x7f00000002c0)="91", 0x1}, {&(0x7f0000000480)='C', 0x1}, {&(0x7f0000000540)='Y', 0x1}, {&(0x7f0000000640)="b4", 0x1}, {&(0x7f00000006c0)='\x00', 0x1}, {&(0x7f0000000780)="a3", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000900)="8c", 0x1}, {&(0x7f0000000980)="d8", 0x1}, {&(0x7f0000000a40)='1', 0x1}, {&(0x7f0000001b40)="a6ed88fb4d1e8381ef04b841c69e8ecd2a84e6d15cf078f445a9dd19411b480f72a02cadc2697c19a5400b46b59e1f65992106cf03cfa2300fcd2eee2089863cd2ee725030a38b4f7fa8924bf1e8ac2b4b6fe3ee5c45749e8e0db6f2dddf3c80bd05af0b4dff307b5ee2439db51b4637cfb25cfa225486eac23e8f1831f546e7880a526992ae6cb7e2013b878fa9d8f5707654574cc64762b5af370bbb5bff174d4b88f5a654ee373b4b43db4f491e3427eb8ae870ce2c6cd5d1c4cc94d20421496748d7ae742d1b349de1c7f68be94c0257a7c1c423f85305057e7cb1d4ff92573572caa0f45e1e4a9e93feb030dfadc5723bdacb3a3b5d748a8ec42772afdc160fa906fa46fd46db348e7b67e5666fd19ba4d36d80ae9a369decb8367af12443bceaeb8c3076a2ddf14adf1d8e8d1c6c2fa1ea90c338cfecdc79321e05412f5ffe4ac687885efa0b94334f0ae07819038ca4d96afd3db1ab2e288de55cccc3e70a54dea530e05a15144373f849607bcf13eb0a6851d5449cb8ac44de7b26e57a2e7f0ebe01a9a185439a3ace2458020e5645bc379e66adb2d43c0c3a56ec3c7f1bb33f06c0e72c2417e0ab7e8006f8c5f3e7ba2ced9f14004374aeabd4338d1ec2fdd0903e335c6b72c7523678016185fd8e6743e6ca7c094bd09309c6c838f98927f9865f208bf6dd0aa592ebc5db602c3fa8c85389624202dc54634bcced1ca194c096093aa4c715c4b57b9f13a6a090ec21b3daa5f776e846b9cf035033fecee50453b3190d505c3819369110da0d38cdcc0ff6db2e5c4ee48ee484af92e4fab369da95271ec3ccfa748e403ac5c1b5fa111541b1ba2e04b3223b70bd1e068c87f1f8ee7e2cb5646fef2c7329f648cddbb0cf1e242504f32d848e4159d21bfcc0ae73e56b7b84a7fe61e3fee0c00780fe83de6131b96fb431bbc455602bf081a67660c2eee555451f2df5e68137ac620a10847b5f763adb0abd8aba00c3fd75fe35ba5d69fdf644e12ac9f10c023f7abd1f241628f69bfa8bf8487d5f8a6bd8662116b09ead7d45d3603de1bb39af4de174c0cdc2d53a2de8c50191031226e922e5fcb68ac4ae86de2c9e8280f4d9a789048ec2750f758be159887fc15d0ee9689a96e0f6da9558af3d45b850528ba590a9284b071f13cfd8e9ee3523680f80026dc06e1426ccef4c94bfc33175041fd57ea416f39ba9519022e63e1c51d46abbf55813888ceebc7f1a08a1e08eb9ab60f572a788b4c9a11da6691d986db333b868e145c001174ed24b131b5dc502bce65172abb45857feda1d67252e3fbe5147850c3d5b3d4ea2033c9b3c6e64b7945b11739d739a147ed30589c2aa69410040af4065d5748a7d4e0207ea35d0d7e97f67878fa105b6a289bfa5f0d68631bf897b21ceb8ad393534591da17f6de0b0959dc07d5d5081b9520db6291d3b54638de735a7fae7ed1bd86746078ac8050ea44fd39bca8b0822348900d1109eb6d6771a42c21ee0823cde18d189e0475a9d51ac81615d002566ecb9030df14adbb39f160948d6fdfc1d756bd5b31184944e29cac049d05729a844b0e08cb04d1798df6b87debabab16e070cc2fae4bde1c18c6fd0fd0bff7435764e1e58d5de5d9eafb3a98cb4d91102bb53377af8a5a580ffc85ebd731c50fcddb6d0c3ae42c0b525c1e799ca78245272685da2eaeff4b9635dc7bdf7894201c53eac595a74f1", 0x4c1}, {&(0x7f0000000b00)='L', 0x1}, {&(0x7f0000000bc0)='V', 0x1}, {&(0x7f0000000240)="d4", 0x1}, {&(0x7f0000000cc0)='\\', 0x1}], 0x8}}], 0x4, 0x604d800) r3 = dup3(r0, r2, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44045) 13:43:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c0, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78b7e8c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc624}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x633}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1080000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4c0b}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "cdd3b6bce46094cb382fceeb9aeb200f6daeea13d5cac29c2a61a86f4213dccf03c61d377e527335fc6a5a64f72000ad6f9bcf07e28c752b79e39cb7916b43fa64c14c6b81181cf6a2a10e0380eb8e94ba2218e42e1507673dee4bff0947e69fe57995bb41ee2639830b6ae3fcc6bb5d5731269faa8afe890710519922cc642078b58ed850b411d0be42bbd7ecf20be0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6c44af06f450d78f14b032460f3e7f560c23434063060f6de665dbc145d2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf8c673317812de27a7ca781f93b36d2eccb4c110ec2b2c6ebbdeb28db87f3dc84"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "80d25d5c8cc94a23b136baeaa1363877ee0d9377146089b88cbb29633ae4bf44e7b6847b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) [ 352.549769][T12121] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:43:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="890751f4c48715fc8f4571a656eeb5495352f226b485eaa4e1dfb206991fd8e3f59267a76e98b8c9c8c7ffb5d77582167b597fa16a9b7757c51667526a0cc1d7c9225c2bc405071f543435a3e6d933fe9e5586a60de8113b821c4c23380f08cd700ed6b872aeff838f93852d5969a64dcd2c5d1f1faf65576de6d1774e6bfe80a2136a86090db5da685c15cef6232473480fd8a5117360d6b09d3a273d39e64caed5b5b47f8ba570a477cd80a7b1b0d9d08145b51fcd1ef40c31b3c08befeb1a2954f4a562f32338034af1faff56b10979c784eaf09f151243da30bc4f26f3bd55a4b8", 0xe3, 0x40, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:43:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:48 executing program 1: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x814) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0xc139, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x50) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc471}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb76}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4020}, 0x44000) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000400)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x208001, 0x0) mq_timedreceive(r0, &(0x7f0000000480)=""/96, 0x60, 0x8, &(0x7f0000000500)) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000540)={0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000580)={0x0, 0x4, 0x1, 'queue1\x00'}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x3, 0xc780]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x4c}}, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000780)=0x8d) socketpair(0x22, 0x4, 0x101, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40094) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000940)=0x2) r3 = fanotify_init(0x40, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980)='/dev/hwrng\x00', 0x434581, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000009c0)='trusted.overlay.nlink\x00', &(0x7f0000000a00)={'U+'}, 0x16, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vsock\x00', 0x404900, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000a80)={{0x20, 0x1f}, {0x4, 0x1}, 0x3, 0x2, 0x1}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000b00), &(0x7f0000000b40)=0xe) 13:43:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x48880, 0x40) r3 = syz_open_dev$vcsn(&(0x7f0000003cc0)='/dev/vcs#\x00', 0x7, 0x44200) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d40)={0x84, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x90001, 0xf0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x200, 0x1f, 0x1000}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="1c000000ce5f2d26993c45864dc4b2c5f0b5a023"], &(0x7f0000000180)=0x18) accept$alg(r1, 0x0, 0x0) 13:43:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:48 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="890751f4c48715fc8f4571a656eeb5495352f226b485eaa4e1dfb206991fd8e3f59267a76e98b8c9c8c7ffb5d77582167b597fa16a9b7757c51667526a0cc1d7c9225c2bc405071f543435a3e6d933fe9e5586a60de8113b821c4c23380f08cd700ed6b872aeff838f93852d5969a64dcd2c5d1f1faf65576de6d1774e6bfe80a2136a86090db5da685c15cef6232473480fd8a5117360d6b09d3a273d39e64caed5b5b47f8ba570a477cd80a7b1b0d9d08145b51fcd1ef40c31b3c08befeb1a2954f4a562f32338034af1faff56b10979c784eaf09f151243da30bc4f26f3bd55a4b8", 0xe3, 0x40, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:43:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, r3, 0x40b, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x86fc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40881}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@setlink={0x40, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x40}}, 0x0) 13:43:48 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/57, 0x39}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x1, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x100, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0), &(0x7f0000000140)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) 13:43:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="3aed2d67"]) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x33, r5, 0x10000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010008506000000624182000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48120}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x81}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x38}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000340)=0x4981ea0a) 13:43:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 355.195293][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.256739][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:43:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x100) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x6) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYRESHEX=r2], 0x15c}}, 0x8044) readlinkat(r3, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=""/63, 0x3f) lsetxattr$security_ima(0x0, &(0x7f0000000440)='security.ima\x00', 0x0, 0x0, 0x3) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0x1000, "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"}, &(0x7f00000014c0)=0x1008) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001500)={r6, 0xffffff9f, 0x5, 0x4}, &(0x7f0000001540)=0x10) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 13:43:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000440)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 13:43:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) [ 355.621049][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.392393][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:43:50 executing program 1: unshare(0x48040680) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4800, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x1510c0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1404, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc045}, 0x4) 13:43:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x100) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x6) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYRESHEX=r2], 0x15c}}, 0x8044) readlinkat(r3, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=""/63, 0x3f) lsetxattr$security_ima(0x0, &(0x7f0000000440)='security.ima\x00', 0x0, 0x0, 0x3) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0x1000, "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"}, &(0x7f00000014c0)=0x1008) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001500)={r6, 0xffffff9f, 0x5, 0x4}, &(0x7f0000001540)=0x10) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 13:43:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x10, 0x2000000003, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) [ 357.381415][T12238] IPVS: ftp: loaded support on port[0] = 21 [ 357.693312][T12238] IPVS: ftp: loaded support on port[0] = 21 13:43:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="7469e052b8c30a819100"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000800010074626600480002000c0005008e0098b477ae69ee080006000500000008000700801500002800010000000000000000000000000000000000000000008a00"/92], 0x74}}, 0x0) 13:43:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000440)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 13:43:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) unshare(0x64040a00) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r0, 0x4}) 13:43:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000100)="00000002", 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bridge\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3, 0x7ff, 0x419, 0xffff0001, 0x4, 0x3, 0x7ff, 0x3f, 0x6fc3ffc1], 0x9, 0x80800}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="23000000190007041dfffd946f610500020000001f00000000000800050016000400ff", 0x23}], 0x1}, 0x0) 13:43:51 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @random="e0d35b1004bb", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40080) [ 358.065286][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:43:51 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14005390dac7c918160cb33fd53074f39800005a00012600"/35], 0x39}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @empty}, 0x48, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='ip6gretap0\x00', 0x353f3798, 0xd1e5, 0xfff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) sendto$isdn(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xda, 0x84, &(0x7f0000000000)={0x22, 0x2, 0x9, 0x4, 0x9c}, 0x6) splice(r0, 0x0, r5, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r7, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x8ec3, 0x0) getsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000280)=""/204, &(0x7f0000000080)=0xcc) 13:43:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) dup2(r0, r0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000440)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) [ 359.150929][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:43:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r0, &(0x7f0000000040)='\b', 0x0, 0x7ff7fea, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "4f60a7faa51b7626", "55334b6301abd6e7b95551a95576b993", "ef0b8248", "5ce912a954746b15"}, 0x28) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x5, 0x5, 0x1, 0x1000, 0x0, [0x80000000, 0x34b, 0x2, 0x3]}) socket$unix(0x1, 0x5, 0x0) 13:43:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000140)) 13:43:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) dup2(r0, r0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000440)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 13:43:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000140)) [ 360.300250][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:43:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x0) dup2(r0, r0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:58 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x3b9801) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x1b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xb1, 0x33, 0x3b, 0x8, 0x499, 0x104f, 0xae04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, &(0x7f0000000180)) 13:43:58 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ec3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x57, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x10, 0xe9, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x40, 0x20, 0x7, 0x2bea, {{0x11, 0x4, 0x3, 0x9, 0x44, 0x68, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @multicast1, {[@ssrr={0x89, 0x23, 0x50, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast]}, @ssrr={0x89, 0xb, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r6, 0xffff, 0x5}, &(0x7f00000003c0)=0x8) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x1c}}, 0x0) 13:43:58 executing program 0: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) pread64(r0, &(0x7f0000002000)=""/3, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000002040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002080)={0x9, 0x0, 0x4, 0x0, 0x3, {r2, r3/1000+60000}, {0x7, 0x8, 0x3b, 0x20, 0x3, 0x9f, "ac5329cf"}, 0x1, 0x0, @fd, 0x2, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000002580)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000002540)={&(0x7f0000002140)={0x3f8, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x6c, 0x5b, "65e0c87430bbcd97a5d8f257fd6821b3621ea1a4b13b259ac30d06b2a4596bcd90d17ad4cb208f8b05a2b9928a0fe157f71ed5ede52025e09ba7c21e314ea4e148cd0dc91d674f326c474a693991532c51316f45f722ed111ce2186996a0306d55dd880a42f5daff"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xa29}, @NL80211_ATTR_FRAME_MATCH={0x7b, 0x5b, "02c08a3c067daa0246b7b6336325a80174047332577116039f75a2e9a702d0e27e3a1f75b88420ee879876fd14b594c41dad720b778becfa796df72252b091473db73b0c965018e7e66bd639fd2641dd1af92b2690d4dcfd23fa25fa97ad9f118b50ff7f6b5bc684bf7dd940fbc86833ad20d0bb4c908c"}, @NL80211_ATTR_FRAME_MATCH={0xd7, 0x5b, "17000033abbf16e3baa24ba4652edac0894195415db8bc8e86f17339964a0edb07ad1e1505a015407d4d49d5177e48d4744a38d1e778b3b575f7239d283ab3dac3add3541c161f6c33c8375eb05a5b429ab38304006c38a64ee8f8823c755f03d79877cf705b9b8b8a948380ecc24b0c556fcad3b4505361a3818a2744f66b25f3789fb8e46e5c448f4d37344376709376d99a4d90b42397415614c7e869e16d46b211e71ae0ca2bccd83399cb6b99c1d057722ff278bd26181cc0cf8eb90fbd6f081a91a76c35c08228400100000000000000"}, @NL80211_ATTR_FRAME_MATCH={0xffffffffffffff96, 0x5b, "39e873a9128f08f34662dd48b54458b8dcec4dcf4d4eca8fff96488788fef0336213ba0ed8f239897fb4c81550931fa0cbd96c6e718173814538b89035064b8267fdab12dca1ac8786ca41039559debe3ec748cafcd953d0b3ac2209032acc5bf7a856edfe02a0219f0f10b32f078c1d94c5c769ffdab5274fbb0d574be8a8cda2b27050ded3c00ca7a147f14974be021963bed89df374e68dd0749472c8258afb9570150cd6b0255790869f66a57722ff9b4e891b74f12f862de0d7807b064a70"}, @NL80211_ATTR_FRAME_MATCH={0x6d, 0x5b, "6fe8dff662a7bf375721685b5ad18ae674c25c1151a273c17303425660d8ed18def515b134013af23eac50b7fdbab20017e84b7ca50304f3bce3ea5e997ce14d119f42c25fa92e1997c37fa029dc76b5b0f4ba66517a0db56fbb7c62f0b9f5519b727dd167fd418310"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xcb, 0x5b, "1f0b9b45466391c33205c883eff49dcb56646a4e68814bdac7ee64a0c36d2a262ebabb61c16dc59386f2e23ffd22896f8692dfb726302efacb08544d2fe06e7b9718606eae7511d3f25a378267cd6e2fa34b1847189e2bb23bed8a1bdd22b2d2b65444771c7b6623e5e81f231b826f7a7643a0003685558924fafa6e0fcf73daefaff3e713013e916b14ccae6794b24344da9e8cd4ad3e8645a0ce983a52a44172ba4d85d494002072def6ffd171557a0b3942749df1eb62819c5fe1d7fd4057a9bc1261a00b5e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9523}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40895}, 0x48000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x8090) 13:43:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:58 executing program 3: r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11e, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xff, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f00000003c0)={r6}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r6}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)={0x5, 0x2ef}) 13:43:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r1, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061bc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "e8ac3abdcaaabc"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005ec40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005ee40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r5}], 0x9, "cd42acf67f4654"}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x3}]}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3f, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 365.620395][T12409] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 365.673121][T12416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:43:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:43:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x170, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4801}, 0x800) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000001c0)="d5a4a0424e5d43297850d48b", 0xc}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:43:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80c002000104082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000c0b000/0x2000)=nil, 0x2000, 0x3000004, 0x4000010, r3, 0xf76a3000) fadvise64(r2, 0x0, 0x0, 0x4) [ 366.448009][T12445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:43:59 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x5428) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffff7}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe20, 0x40, @local}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa2}}}, 0x1c) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000380)=0x10, 0x100000) r7 = accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e, 0x81000) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x4088}, {0xffffffffffffffff, 0x4768}, {r6, 0x20}, {r5, 0x400}, {r0, 0x80}, {r7, 0x1001}, {r1, 0x80ad}], 0x7, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x7]}, 0x8) 13:43:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x111000, 0x100, 0x1e}, 0x18) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r3, r4], 0x3) close(r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180), 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x8) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 13:43:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000ff4d0000000000400007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x2, 0x4bc}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x8) [ 367.254449][ T53] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 367.574644][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 367.719405][ T53] usb 2-1: config 0 has no interfaces? [ 367.884478][ T53] usb 2-1: New USB device found, idVendor=0499, idProduct=104f, bcdDevice=ae.04 [ 367.893564][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.902881][ T53] usb 2-1: Product: syz [ 367.907662][ T53] usb 2-1: Manufacturer: syz [ 367.912253][ T53] usb 2-1: SerialNumber: syz [ 367.921951][ T53] usb 2-1: config 0 descriptor?? [ 368.173405][ T9818] usb 2-1: USB disconnect, device number 2 [ 368.984266][ T9823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 369.234351][ T9823] usb 2-1: Using ep0 maxpacket: 8 [ 369.354382][ T9823] usb 2-1: config 0 has no interfaces? 13:44:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 13:44:02 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6b, 0xf2, 0xf4, 0x20, 0xbfd, 0x4, 0x8c5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x6c, 0x1e, 0xf8, 0x0, [], [{{0x9, 0x5, 0x8, 0x9f813308da75ba9e}}, {{0x9, 0x5, 0xd, 0x2}}]}}]}}]}}, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='+%\x00', 0x3, 0x2) 13:44:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x800000800000003) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x40) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000080)={0x4, 0x80}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000540)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sched_yield() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="020027bd7000fcdbdf25070000000c00018008000300030000000c00018008000300020000000c000180080003000180140002006c6f0000000000000000000000000000480003000100000008000100000000000000", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="2c0001800800030006000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030000000000180001801400020076657468315f766c616e000000000000540001801400020067726574617030000000000000000000080003000000000008000300010000001400020076657468315f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030002000000"], 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x81) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f0000000200)=0x54) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f00000000c0)=0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)) getsockopt$inet_mreqsrc(r0, 0xffffffff00000000, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 13:44:02 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x250100, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x7) mq_getsetattr(r1, &(0x7f0000000040)={0xeee, 0x4, 0x5, 0x9}, &(0x7f0000000080)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000400)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xb5\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x91\x0f\x00\x00~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0yx\xc9}m\x7f`\xfa\xfes\xeej\xf7\x9e}\x89\xff\x8c\x00'/219) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) 13:44:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000080)=0x199d6c42, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "c38b649f0139"}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000900)=@string={0x2}}, {0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="0603ef17e1fd"]}]}) [ 369.494194][ C0] raw-gadget gadget: ignoring, device is not running 13:44:02 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x33, @multicast1, 0x4e22, 0x2, 'rr\x00', 0x20, 0x89b, 0x20}, 0x2c) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) r4 = socket(0x2, 0x800, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}}, 0x38}}, 0x20004150) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x805) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x70, 0x81, 0x0, 0xe4, 0x3f, 0x0, 0x1, 0x5c0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800003ff, 0x2, @perf_config_ext={0x8, 0x9}, 0x2, 0x1, 0x6, 0x7, 0x0, 0x7fff, 0x310}) [ 369.544342][ T9823] usb 2-1: New USB device found, idVendor=0499, idProduct=104f, bcdDevice=ae.04 [ 369.578359][ T9823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.619458][ T9823] usb 2-1: Product: syz [ 369.635842][ T9823] usb 2-1: Manufacturer: syz [ 369.658298][ T9823] usb 2-1: config 0 descriptor?? 13:44:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x30, 0x101}, 0x211, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001be1b609d35165a2ed495fac0913fa8ec388407efd5558d4a4bf314730ab792f1cf6f2cb1a341c702064d331d2e170341893fa196ced968ba6e29fbdbd34f55bcc823e2e901c21192dc22bb4f952ec5a998e8a31c8844d66d09ff8a6c8820a59b7750180ba62abf33adc404c585795ca0dac92a3be00"/135, @ANYRES16=r2, @ANYBLOB="2b04000000000000000001000000000000000141000000100017000000000000000069623a00"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfcbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x20, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x4b, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) 13:44:02 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) preadv(r3, 0x0, 0x0, 0xeff, 0x1d2b) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='@\x00', &(0x7f0000000080)='#}\x00', 0x0) [ 369.697378][ T9823] usb 2-1: can't set config #0, error -71 [ 369.751459][ T9823] usb 2-1: USB disconnect, device number 3 [ 369.845836][ T9818] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 369.948928][ T34] kauditd_printk_skb: 3 callbacks suppressed [ 369.948944][ T34] audit: type=1804 audit(1608299043.142:38): pid=12515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/146/file0/bus" dev="sda1" ino=15752 res=1 errno=0 [ 370.064297][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 370.104258][ T9818] usb 1-1: Using ep0 maxpacket: 32 13:44:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 370.245225][ T9818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 370.268988][ T9818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 370.304214][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 370.307397][ T9818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 13:44:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x30, 0x101}, 0x211, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001be1b609d35165a2ed495fac0913fa8ec388407efd5558d4a4bf314730ab792f1cf6f2cb1a341c702064d331d2e170341893fa196ced968ba6e29fbdbd34f55bcc823e2e901c21192dc22bb4f952ec5a998e8a31c8844d66d09ff8a6c8820a59b7750180ba62abf33adc404c585795ca0dac92a3be00"/135, @ANYRES16=r2, @ANYBLOB="2b04000000000000000001000000000000000141000000100017000000000000000069623a00"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfcbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x20, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="52019b1be2020a51a113b0f98c7b16c751b3b4a431e452cc3cde8712cd1f37bd51700100831c9d3eef735adfd1e93882f6080577bda97f9732436b13f21c5589685f3397da381dda91888c893ac4e355e17272aaa31aa93a5119b73bb7282485069c025634b6252a7c344c82b697bb81a1134cf329bf2047440a0d6a5cac056682c795011e000000000000446b9f9bf2e319402d553a4068a211fe51be9f9086ef119e1cf7a14f88665f036317c3d5668e81cb7772a4e3567094ce292cc6c07b96f47ba84a77226bb8c5629c1e22f707335bd16635437b65eb9dc89104e3361781505da1325d8c6425d565760ea0f908e819f68bb6eb1acc0f0fb5f1587e143d5b2af0731a3b3a7495278aed7a2406de4e07b44bac013b1b2628c6d716164d39cb2c24fb5d98c285b4e503e3ce71564505f8acb8fa967887e413ec0fb424fed3ebfca40884ffa74364a19ac84841bb78dca761f8cd9a556d111a15f6d0e0180f072300000000f538d422d7d0ebb231c3dadacba459ddedf633df95da2d8c79411bf5b3c721bbdb639404023d829700000000000000000000563c7e25e52b997a6060f4f53a1e99e994c763c8d612279f5706f236f55042ad80e4a1017d97444ce921ef164ff34d6756cdf60752be1a33d315ff6218e422d962e5b7db3de8c6e71724d888fa547f8c6a5759822412b525fb668afef6eccbb63225ba5d7287f17062e94a609bb13134090463b1086ef50b3587cab7c36b35d861b56f02686105b8c89080e7360a0e455ec5d421c6d9c954e068d4e75dfa63b983f7e84a94ab7c2a35e89260621f7083e02fe060b0e1c32f25c6aa7d9752d88aea9b27608523037d010a7a6bf31b318e2a42c1136bca3fbd8cb11de93f03654a7a7aded72092f0725e71667da0792d9e8f404b61ed1ac05a33e5da731b9eef3c88a3bd73446ce4ce894512df0e9f7ecbbc0b9fc266ef16a8b905b939ebb23852808874915d5ed7bc406443a15e375eb70aaa04", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x4b, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) [ 370.369245][ T9818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 370.425130][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 370.475086][ T7] usb 4-1: language id specifier not provided by device, defaulting to English [ 370.603781][ T9818] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=8c.5c [ 370.604975][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.618580][ T9818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.636276][ T34] audit: type=1804 audit(1608299043.832:39): pid=12536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/147/file0/bus" dev="sda1" ino=15752 res=1 errno=0 [ 370.676743][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.677097][ T9818] usb 1-1: Product: syz [ 370.704401][ T7] usb 4-1: Product: syz [ 370.716169][ T9818] usb 1-1: Manufacturer: syz [ 370.718935][ T7] usb 4-1: Manufacturer: ៯﷡ [ 370.737909][ T9818] usb 1-1: SerialNumber: syz [ 370.743094][ T7] usb 4-1: SerialNumber: syz [ 370.787124][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 370.796892][ T9818] usb 1-1: config 0 descriptor?? 13:44:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x30, 0x101}, 0x211, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001be1b609d35165a2ed495fac0913fa8ec388407efd5558d4a4bf314730ab792f1cf6f2cb1a341c702064d331d2e170341893fa196ced968ba6e29fbdbd34f55bcc823e2e901c21192dc22bb4f952ec5a998e8a31c8844d66d09ff8a6c8820a59b7750180ba62abf33adc404c585795ca0dac92a3be00"/135, @ANYRES16=r2, @ANYBLOB="2b04000000000000000001000000000000000141000000100017000000000000000069623a00"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfcbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x20, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x4b, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) [ 370.865283][ T9818] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 370.981591][ T34] audit: type=1326 audit(1608299044.172:40): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 371.071856][ T9818] usb 1-1: USB disconnect, device number 3 [ 371.113719][ T34] audit: type=1804 audit(1608299044.252:41): pid=12548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/148/file0/bus" dev="sda1" ino=15752 res=1 errno=0 [ 371.136615][ T53] usb 4-1: USB disconnect, device number 2 13:44:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 371.267556][ T34] audit: type=1800 audit(1608299044.292:42): pid=12548 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15752 res=0 errno=0 13:44:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x30, 0x101}, 0x211, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001be1b609d35165a2ed495fac0913fa8ec388407efd5558d4a4bf314730ab792f1cf6f2cb1a341c702064d331d2e170341893fa196ced968ba6e29fbdbd34f55bcc823e2e901c21192dc22bb4f952ec5a998e8a31c8844d66d09ff8a6c8820a59b7750180ba62abf33adc404c585795ca0dac92a3be00"/135, @ANYRES16=r2, @ANYBLOB="2b04000000000000000001000000000000000141000000100017000000000000000069623a00"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfcbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x20, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x4b, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) [ 371.624486][ T34] audit: type=1804 audit(1608299044.812:43): pid=12568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/149/file0/bus" dev="sda1" ino=15752 res=1 errno=0 [ 371.854111][ T53] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 371.927253][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 372.104227][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 372.180642][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 372.235015][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 372.254558][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 372.272858][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 372.304424][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 372.304951][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 372.355200][ T7] usb 4-1: language id specifier not provided by device, defaulting to English [ 372.484196][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.493499][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.502029][ T7] usb 4-1: Product: syz [ 372.507283][ T7] usb 4-1: Manufacturer: ៯﷡ [ 372.512257][ T7] usb 4-1: SerialNumber: syz [ 372.524356][ T53] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=8c.5c 13:44:05 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001fffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000067040000000000002d400500000000004704000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc303000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19b971a506e4c6c7125c4bdc75235c461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7922edc5c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a93f93f04bf072f0863f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a23ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7362f0ebadde0b727f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9616a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000000000000000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbb048568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafd04da6fcc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c01803e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x800, 0x0, 0x3, 0x1}, 0x10}, 0x78) 13:44:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x30, 0x101}, 0x211, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001be1b609d35165a2ed495fac0913fa8ec388407efd5558d4a4bf314730ab792f1cf6f2cb1a341c702064d331d2e170341893fa196ced968ba6e29fbdbd34f55bcc823e2e901c21192dc22bb4f952ec5a998e8a31c8844d66d09ff8a6c8820a59b7750180ba62abf33adc404c585795ca0dac92a3be00"/135, @ANYRES16=r2, @ANYBLOB="2b04000000000000000001000000000000000141000000100017000000000000000069623a00"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfcbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x20, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x4b, 0x80019c) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) 13:44:05 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 372.544309][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.562443][ T53] usb 1-1: Product: syz [ 372.572736][ T53] usb 1-1: Manufacturer: syz [ 372.586022][ T53] usb 1-1: SerialNumber: syz 13:44:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002240)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x80f70000}, 0x100) 13:44:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000fb, 0x0, 0x0, 0x200000, 0x400000000000000]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e22, @private=0xa0100ff}, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/12, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.634227][ T7] usb 4-1: can't set config #1, error -71 [ 372.649529][ T7] usb 4-1: USB disconnect, device number 3 [ 372.656642][ T53] usb 1-1: config 0 descriptor?? [ 372.694275][ T53] usb 1-1: can't set config #0, error -71 [ 372.734609][ T53] usb 1-1: USB disconnect, device number 4 [ 372.776720][ T34] audit: type=1804 audit(1608299045.972:44): pid=12587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/150/file0/bus" dev="sda1" ino=15752 res=1 errno=0 13:44:06 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81}, 0x14) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0xbc, "514e6563101dd988a4f552e06d2b1d3499804c8b0275d95135eff982e8cc71f03aebb814577fbccbec8b59608f2cca9ccb75b0726fffbf9a7d76dd7355946fccc9a7215674f05c6d8e10b81af5f7b318fa6e02a99288a441b3a384f261e622af647c008da441408fbd6472aa090b86e2a50b8b6ebf7c577a1f9384f84ca965a2c6338606157803ce7211d5f1f275f1743e7be2a33fe1fafcacadde55659080542600b16c7f04565a8f2b60f7e2a22f3734ff5f4c2fc8de49dc574a12"}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10103, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20004040) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x0, 0x10c, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x400c0) dup(0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r3, &(0x7f0000000080)='!', 0xffffffd9) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffff076, 0x200000) r5 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="18e710f65d5c74eaebd8e8e5588aff5a41589fc2b86fcc20b5be7bc0988a1ac4016840c3f33acc91c1422bb44d185d0edacf778a0092d1cc3065e508e2fe915a968b2343723eaaa9b010929603bf4af42ea0bafbcd6a13306962613550dd22550fdd328177827c689794e7e2cfbb3b59442438220106035f0d9959000a40a950e4504b0de755ef723d19ead63c94aa58a330b69b3d19cacc13bceb40102aba96", 0xa0}, {&(0x7f00000004c0)="3749c12faed1929a9cac834b6dab4bbd4df46c5b3a635f22acd1566867792bef17064eac58b43f683370f53b668d9e16f5665ea2a4a474e338e937c092e8664c51c7160439971d99a6c96d6016abc1abeeafc49a486826c99cfcc3e30ab86196be258618b840fed5bfa4ad0cb5f3d60b785ccba47b21a098e4d1c116f91b0f4f5999377937acc42b78392153d9c232b4ff50bac1023b6b1c2c1a0e99687f5359ae05a7", 0xa3}, {&(0x7f0000000580)="4b919635fa9b54f6032946e527483b5c290506b1b88efb7bf73c58d7c11ffebf7666ca0acdb0d7e55152dde22af19672cb6306474d8d7196b828c873007faba14e6ddad45e579f633ac0c5aa601b755af697321ec7f5b6d30f91703c3f4dbd134ee2c1f5806d630b1c6bc967330298dabb96eddc8290898056e7628523fc58ee6e49fcef4e77477480cc553e974cc48d9b7e5a51d73fb3e71888cc2b05a31bac7112d71659f90f6e84ebc38f2c318fef6e63f28bd27bb3103e4ce0ecc52ab3f7d42dba0b30f8a7fbd413c9d96a671836545e590aea4e72d633b5d2af20082ad74b2fe2b8bd79cb0bb02934a5", 0xec}, {0x0}, {&(0x7f0000000680)="e37e3cfce4f9fd17d095490dead1584163dbc04e2438ec1a945fc90379f4d2718f2ae0695dbff376f8f0e074b4ffb04a02bdd333ffba26fe83978de06381bc862e3c013f539a48fc36cd37e7bee63f14d3e16fe53eaf11ec15587db32b45b76c16ced5425316aff0feb95912", 0x6c}, {&(0x7f0000000240)}, {&(0x7f0000000700)="ebc72c4a9b39e66ee6778640829b49e2b25459520826b2e04bcfd4594bced346a273d39b3c1fbb6e8c0d17f546324dce066d45fdb2f05da7831d5876634fc99ab37610adbf42173bcd739d12ee3457aed0cacd9219f3996cc6987353d0f9a07cbf04", 0x62}, {&(0x7f0000000780)="f17b150f56065c50b5f1704ea14633688ca34ddd4132519729a2e1748837394708b3701a50b5a9d6823c31cf8b6f1927f89f9b9a08f8ac68465b8a2ed707175d7606a2e8670f2468850429291cb70348971d5309d6c4db23688757b5beb977e7910660c07ce630126449a0eefc5b16704d88bb0cf29f4029b1644a4fb7d6f9d8a58ef937f499b85422d46c701eb2929a721288bee61d1b911d7c39", 0x9b}, {&(0x7f0000000880)="82a9b46b59450105cabb5f4363e38d7dd26afd611587b0246f2d2b4fd0b14318a6ad31622e4638444a9235a78876829b7973b8777024fa4b6278ddab030130e7109a8ad219163e354c8ef15554c7592ea1acd4f52e6ab71956d3b37e3942565266bb6ecc6f68173fc934e5a7f2c905aaa9364a", 0x73}, {&(0x7f0000000940)}], 0xa, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="22012cbd6c00fcdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000020}, 0x4000000) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000180)=0x7) 13:44:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) preadv(r3, 0x0, 0x0, 0xeff, 0x1d2b) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='@\x00', &(0x7f0000000080)='#}\x00', 0x0) 13:44:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000240)=0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@loopback, @in=@dev, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x8}, 0x0) 13:44:06 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/125) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x9, 0x3a, 0x30, 0x8, 0xf3d, 0x68a3, 0x85c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file0\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TCFLSH(r1, 0x404c4701, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000280)=""/29, 0x1d}], 0x1, 0x80, 0xfffffffc) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/167}) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x0, 0xffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010001f9579ff80f98007106de3f8a8cb", @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062f74e6d59d26e316a21bf4d3ec70349dd6a5bd1f9aca71543a1980653fe69660b5024cd6f39159cf2b9b535fc289aeaa81c3666c2b011275bb212d09d69548c475c075379311e3145ac59a48a8d9791ab68c3bb74650f0e5c4bf2332b370a8fe05c0864ac9142cfbe6147525aa2f87b54c6fa5b25b0b15cb76e8186b52ea9d2e841d89572d679a282b38ad626c63dd8fe4ce4ea3146d3cad715e98e9ed6b560814466d43207adf390"], 0x70}}, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x40400, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) 13:44:06 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:44:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) read$alg(r2, &(0x7f0000000080)=""/80, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x35}}, 0xd5ba}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 373.684096][ T9814] usb 1-1: new high-speed USB device number 5 using dummy_hcd 13:44:07 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 373.964011][ T9814] usb 1-1: Using ep0 maxpacket: 8 13:44:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) read$alg(r2, &(0x7f0000000080)=""/80, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x35}}, 0xd5ba}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 374.116423][ T9814] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=85.c4 [ 374.142130][ T9814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.168562][ T9814] usb 1-1: config 0 descriptor?? [ 374.304915][ T9814] hub 1-1:0.0: bad descriptor, ignoring hub [ 374.311508][ T9814] hub: probe of 1-1:0.0 failed with error -5 [ 374.362029][ T9814] sierra 1-1:0.0: Sierra USB modem converter detected 13:44:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 374.626481][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.701510][T12641] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 13:44:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) read$alg(r2, &(0x7f0000000080)=""/80, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x35}}, 0xd5ba}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 374.789945][ T9814] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 374.856133][ T9814] usb 1-1: USB disconnect, device number 5 [ 374.904394][ T9814] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 374.916272][ T9814] sierra 1-1:0.0: device disconnected [ 375.553953][ T3891] usb 1-1: new high-speed USB device number 6 using dummy_hcd 13:44:08 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:44:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) read$alg(r2, &(0x7f0000000080)=""/80, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x35}}, 0xd5ba}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 375.808710][ T3891] usb 1-1: Using ep0 maxpacket: 8 [ 375.934986][ T3891] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=85.c4 [ 375.946371][ T3891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.961339][ T3891] usb 1-1: config 0 descriptor?? [ 376.006021][ T3891] hub 1-1:0.0: bad descriptor, ignoring hub [ 376.012337][ T3891] hub: probe of 1-1:0.0 failed with error -5 [ 376.031409][ T3891] sierra 1-1:0.0: Sierra USB modem converter detected [ 376.286211][ T3891] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 376.346445][ T3891] usb 1-1: USB disconnect, device number 6 [ 376.416167][ T3891] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 376.488931][ T3891] sierra 1-1:0.0: device disconnected [ 411.092575][ T9814] Bluetooth: hci0: command 0x0406 tx timeout [ 411.092630][ T9814] Bluetooth: hci4: command 0x0406 tx timeout [ 411.092662][ T9814] Bluetooth: hci3: command 0x0406 tx timeout [ 411.122174][ T9823] Bluetooth: hci1: command 0x0406 tx timeout [ 411.128280][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 411.134602][ T7] Bluetooth: hci5: command 0x0406 tx timeout 13:45:06 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="000425b97000fbdbdfe41101a1f07c0c250100d0586f576b6aab22a13219e06453ab0000b6cfd5bd8424110000000006000100000000800800050002000b000a0000800800030002000000080009006300000005000d000100000008080800c00200000800080008000000b400050005380000000000644f4155bf76a453ddc77a9b9543823d659e936dc51d153f2ee4440b551b7fced23f077300"/169, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r3, @ANYRES32=r4], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x516, '\x00', 0xe79}, 0x0, 0x200, 0x4, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0, 0x0, [], [0x62f, 0xfff8]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13:45:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) read$alg(r2, &(0x7f0000000080)=""/80, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x35}}, 0xd5ba}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 13:45:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) preadv(r3, 0x0, 0x0, 0xeff, 0x1d2b) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='@\x00', &(0x7f0000000080)='#}\x00', 0x0) 13:45:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) read$alg(r2, &(0x7f0000000080)=""/80, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x35}}, 0xd5ba}, 0x90) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 13:45:06 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/125) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x9, 0x3a, 0x30, 0x8, 0xf3d, 0x68a3, 0x85c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file0\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TCFLSH(r1, 0x404c4701, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000280)=""/29, 0x1d}], 0x1, 0x80, 0xfffffffc) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/167}) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x0, 0xffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010001f9579ff80f98007106de3f8a8cb", @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062f74e6d59d26e316a21bf4d3ec70349dd6a5bd1f9aca71543a1980653fe69660b5024cd6f39159cf2b9b535fc289aeaa81c3666c2b011275bb212d09d69548c475c075379311e3145ac59a48a8d9791ab68c3bb74650f0e5c4bf2332b370a8fe05c0864ac9142cfbe6147525aa2f87b54c6fa5b25b0b15cb76e8186b52ea9d2e841d89572d679a282b38ad626c63dd8fe4ce4ea3146d3cad715e98e9ed6b560814466d43207adf390"], 0x70}}, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x40400, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) 13:45:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x9c, &(0x7f0000002300)="c4c691019919daf762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741a151f4e2fb357baa16dacdcf44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f828c0c4db583a208718e3cccd9dd3bf7a0b9daf36829d2d3e73af34a91a4a8844ee4b7e66452419abb6e3a61bb6420ca"}}], 0x1c) r0 = socket(0x10, 0x80002, 0x0) r1 = dup(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() tkill(0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) [ 433.844798][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd 13:45:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 434.122845][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 434.242616][ T7] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=85.c4 [ 434.259950][ T8] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.274367][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.311530][ T7] usb 1-1: config 0 descriptor?? 13:45:07 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x69) write$eventfd(r1, &(0x7f0000000080)=0x5, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x801, 0x84) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x3, 0x7fffffff, 0x8001, 0x80000000}) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) fcntl$dupfd(r3, 0x406, r4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x38cddfcf19713c00) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x34000}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 434.373844][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 434.385837][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 434.413878][ T7] sierra 1-1:0.0: Sierra USB modem converter detected 13:45:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 435.238859][ T8] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.305836][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 435.344012][T12876] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.006685][ T8] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.107046][ T7] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 436.172074][ T7] usb 1-1: USB disconnect, device number 7 [ 436.206101][ T7] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 436.238706][ T7] sierra 1-1:0.0: device disconnected [ 436.445399][ T8] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:45:11 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="540000001300030200"/56, @ANYRES32=0x0, @ANYBLOB="00000000acb50100a14500"/24], 0x54}}, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r1, r2) 13:45:11 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) preadv(r3, 0x0, 0x0, 0xeff, 0x1d2b) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='@\x00', &(0x7f0000000080)='#}\x00', 0x0) [ 438.369664][ T34] audit: type=1326 audit(1608299111.565:45): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12944 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 439.991692][ T8] device hsr_slave_0 left promiscuous mode [ 440.005224][ T8] device hsr_slave_1 left promiscuous mode [ 440.012606][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.020020][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.030314][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.038260][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.048145][ T8] device bridge_slave_1 left promiscuous mode [ 440.055732][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.070206][ T8] device bridge_slave_0 left promiscuous mode [ 440.076745][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.095674][ T8] device veth1_macvtap left promiscuous mode [ 440.102837][ T8] device veth0_macvtap left promiscuous mode [ 440.108890][ T8] device veth1_vlan left promiscuous mode [ 440.116609][ T8] device veth0_vlan left promiscuous mode [ 440.681962][T12976] IPVS: ftp: loaded support on port[0] = 21 [ 442.620861][ T9814] Bluetooth: hci4: command 0x0409 tx timeout [ 444.690748][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 445.255344][ T8] team0 (unregistering): Port device team_slave_1 removed [ 445.273005][ T8] team0 (unregistering): Port device team_slave_0 removed [ 445.290313][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.307166][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.377656][ T8] bond0 (unregistering): Released all slaves [ 445.545200][T12976] chnl_net:caif_netlink_parms(): no params data found [ 445.625873][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.633212][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.642960][T12976] device bridge_slave_0 entered promiscuous mode [ 445.654571][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.661981][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.670143][T12976] device bridge_slave_1 entered promiscuous mode [ 445.764500][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.781377][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.813833][T12976] team0: Port device team_slave_0 added [ 445.826027][T12976] team0: Port device team_slave_1 added [ 445.854879][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.862580][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.889281][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.915945][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.924160][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.950867][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.981146][T12976] device hsr_slave_0 entered promiscuous mode [ 445.988059][T12976] device hsr_slave_1 entered promiscuous mode [ 445.994984][T12976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.004109][T12976] Cannot create hsr debugfs directory [ 446.138670][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.146053][T12976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.154302][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.161441][T12976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.244345][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.265292][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.275512][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.285824][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.304409][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.323475][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.333080][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.340150][ T3891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.361908][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.370409][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.377580][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.405514][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.422212][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.433547][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.453725][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.463138][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.472477][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.482603][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.495936][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.547889][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.566592][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.584140][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.616719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.627622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.658504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.668100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.682244][T12976] device veth0_vlan entered promiscuous mode [ 446.694098][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.703267][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.718854][T12976] device veth1_vlan entered promiscuous mode [ 446.757599][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.767562][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.778087][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.780734][ T53] Bluetooth: hci4: command 0x040f tx timeout [ 446.787807][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.815019][T12976] device veth0_macvtap entered promiscuous mode [ 446.841973][T12976] device veth1_macvtap entered promiscuous mode [ 446.888473][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.906924][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.918264][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.944073][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.960566][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.979122][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.990270][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.010013][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.031000][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.052090][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.071559][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.080061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.098869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 447.108828][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.118086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.141403][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.154839][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.166393][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.177234][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.187286][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.198277][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.208545][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.219381][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.240090][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.252645][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.266253][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.278335][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.288955][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.455654][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.477586][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.495418][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.521162][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.530879][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.541800][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 13:45:21 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="000425b97000fbdbdfe41101a1f07c0c250100d0586f576b6aab22a13219e06453ab0000b6cfd5bd8424110000000006000100000000800800050002000b000a0000800800030002000000080009006300000005000d000100000008080800c00200000800080008000000b400050005380000000000644f4155bf76a453ddc77a9b9543823d659e936dc51d153f2ee4440b551b7fced23f077300"/169, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r3, @ANYRES32=r4], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x516, '\x00', 0xe79}, 0x0, 0x200, 0x4, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0, 0x0, [], [0x62f, 0xfff8]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13:45:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000540)=""/210, 0xd2}], 0x4}, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp1\x00', 0x90000, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="d95e4df22d52a5d9504a55fadb0bebc8f619d8fc0000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x2, "51d7"}, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40282, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec3, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x1) 13:45:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r1, 0x127a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x84, @local, 0x4e23, 0x3, 'lblc\x00', 0x0, 0x8, 0x19}, 0x2c) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x10c) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) 13:45:21 executing program 1: perf_event_open(&(0x7f0000001540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4840, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd0, 0x464, 0x400, 0x70bd29, 0x25dfdbfc, "b8f86928e35855acd1d96ad4b794ddf7d4b7ae00bd6eca6cbcf1e5d9fd23eee35bdf727e471af6690075caee35e22a3aff839d8e644bc25011bdd4e7566cb4121a881488a3dcfabc824b92df8a982b83e1a4fe16875c42a7704b1df4854c319ef75c37f7a2ba52e9323dfd4bfb9ecbef1871debcdab25515be19f0cf54117159ea983a964eecff4ce59ffee472a10d2b4aa4bbd920812a030d99a45f858b084b85090b063b43afeb275821b45712af06ce745aaf95902cc9f4e7fd7127a6", ["", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000100}, 0x80) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000001200)=""/107, 0x6b}, {0x0}, {&(0x7f0000003540)=""/4110, 0x100e}], 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) 13:45:21 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x97, 0x61, 0xe8, 0x40, 0xe20, 0x101, 0x3290, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0xa3, 0x7d, 0x46}}]}}]}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) [ 448.860745][ T9818] Bluetooth: hci4: command 0x0419 tx timeout 13:45:22 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="000425b97000fbdbdfe41101a1f07c0c250100d0586f576b6aab22a13219e06453ab0000b6cfd5bd8424110000000006000100000000800800050002000b000a0000800800030002000000080009006300000005000d000100000008080800c00200000800080008000000b400050005380000000000644f4155bf76a453ddc77a9b9543823d659e936dc51d153f2ee4440b551b7fced23f077300"/169, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r3, @ANYRES32=r4], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x516, '\x00', 0xe79}, 0x0, 0x200, 0x4, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0, 0x0, [], [0x62f, 0xfff8]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 449.120789][ T53] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 449.151361][ T17] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 449.370535][ T53] usb 1-1: Using ep0 maxpacket: 8 13:45:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 449.501083][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.512745][ T17] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 449.540448][ T17] usb 6-1: config 0 has no interface number 0 [ 449.546669][ T17] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=32.90 [ 449.558936][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.580580][ T53] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 449.600008][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.617869][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.630970][ T17] usb 6-1: config 0 descriptor?? [ 449.658520][ T53] usb 1-1: config 0 descriptor?? [ 449.889505][ T17] usb 6-1: USB disconnect, device number 2 13:45:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 450.460696][ T53] usbhid 1-1:0.0: can't add hid device: -71 [ 450.467885][ T53] usbhid: probe of 1-1:0.0 failed with error -71 [ 450.538220][ T53] usb 1-1: USB disconnect, device number 8 [ 450.690470][ T3891] usb 6-1: new high-speed USB device number 3 using dummy_hcd 13:45:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001030101000921000000012205000905810346"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000400000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x2b, 0x26, 0x90, 0x40, 0x733, 0x401, 0xc93d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdf, 0xb4, 0x91}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000400)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0xa, 0x9d, {0x9d, 0x21, "067140095b9b2aa26ecf0ca0306a69d8100da774943f3653721b54ac938787fc6e9ad90f5bd4cbf0acdee0d48cf85363a150de4c80b5b71dba89fcb0d6c1276dd846fc8712c9425e3cf45212a43151ca61e8a204d36ee7b9d0fe4bf0815facad991f6eb79a6362db56a84afeb8742399944a20424e036f12734f4b90c59f917b401064a1d83d5b5f0c143c9ef35b9b214e686d583b25351a781669"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0xd, 0x8d, "da9c5213d5e5b5ca263c81a5c2fa6bf346b71be5f7dd80e2ce5e1a55875461c0b570153810bb4ebde3a0ed582ff56ffba75b049cf197f7a1e434a307f34b969c197b919320cc6446d2be1fc3f67450d90c5ce6a0ad41ee417e9d0a5ea0b04796c296426046bd668a54780b8fd1ba5865c38b1fdf74cdc39543088468711038955562caba0221dfffaf945648d4"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x9, 0x13, 0x0, 0x5, 0x7, 0x40, 0x3f, 0x6, 0x9, 0x7ff, 0x81, 0xdf}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x7ff}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 13:45:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 451.051248][ T3891] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 451.059481][ T3891] usb 6-1: config 0 has no interface number 0 [ 451.088786][ T3891] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=32.90 [ 451.110813][ T3891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.132949][ T3891] usb 6-1: config 0 descriptor?? [ 451.230379][ T53] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 451.422384][ T9823] usb 6-1: USB disconnect, device number 3 [ 451.501144][ T53] usb 1-1: Using ep0 maxpacket: 8 13:45:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x50000, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x100000008, 0x0, 0x4000) [ 451.641970][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.653861][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.664373][ T53] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 451.674235][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.685419][ T53] usb 1-1: config 0 descriptor?? [ 451.760527][ T17] usb 2-1: new high-speed USB device number 4 using dummy_hcd 13:45:25 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="000425b97000fbdbdfe41101a1f07c0c250100d0586f576b6aab22a13219e06453ab0000b6cfd5bd8424110000000006000100000000800800050002000b000a0000800800030002000000080009006300000005000d000100000008080800c00200000800080008000000b400050005380000000000644f4155bf76a453ddc77a9b9543823d659e936dc51d153f2ee4440b551b7fced23f077300"/169, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r3, @ANYRES32=r4], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x516, '\x00', 0xe79}, 0x0, 0x200, 0x4, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0, 0x0, [], [0x62f, 0xfff8]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13:45:25 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000df0f0000000000006e7cf9f2d7eaed41fed7ce753c4c09cf1992df0890a828da41919527c09f22cd0d7e836bf29c70c8c5126b41f2f60529ada547494726467e796f483057e944069ff531152d8854659474b2f50edb3dae50f0f83e5255c54e7e7968000000000000000000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32=r4, @ANYBLOB="30c1"], 0x48}}, 0x0) 13:45:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:25 executing program 5: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8ffffff", @ANYRES16=0x0, @ANYBLOB="0010dd0000efecabf14d07cc8b7d84b33800", @ANYRES32=0x0, @ANYBLOB='w'], 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x102, 0x30) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x7, 0x20010, r2, 0x83000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec3, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0)={0x1, 0x2}, 0x2) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 451.977674][T13323] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 451.990759][ T53] usbhid 1-1:0.0: can't add hid device: -71 [ 451.997102][ T53] usbhid: probe of 1-1:0.0 failed with error -71 [ 452.041081][ T17] usb 2-1: Using ep0 maxpacket: 16 13:45:25 executing program 5: unshare(0x40000000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xffffff80, 0x178, 0x0, 0xc7, 0x260, 0x258, 0x258, 0x260, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'macvlan1\x00', 'team_slave_1\x00'}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@state={{0x28, 'state\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@dev, @private0, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) [ 452.090606][ T53] usb 1-1: USB disconnect, device number 9 [ 452.108159][T13330] IPVS: ftp: loaded support on port[0] = 21 [ 452.223231][T13337] IPVS: ftp: loaded support on port[0] = 21 [ 452.266727][T13342] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 452.314908][T13342] xt_CT: You must specify a L4 protocol and not use inversions on it 13:45:25 executing program 3: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050428bd7000fedbdf25110000000800a400000000001600bd00070079f01f00b590e3003f000900030000800000060010000000000006000100000005007400060000000c0043000400000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) symlinkat(0x0, r2, &(0x7f00000000c0)='./file0\x00') renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000280)=ANY=[]) write$P9_RGETATTR(r4, &(0x7f00000000c0)={0xa0, 0x19, 0x80, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x100000, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540)) fallocate(r4, 0x0, 0x0, 0x8800000) [ 452.586626][T13337] IPVS: ftp: loaded support on port[0] = 21 13:45:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(0xffffffffffffffff) pipe(&(0x7f00000001c0)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, 0x0) recvfrom$packet(r4, &(0x7f00000002c0)=""/31, 0x1f, 0x140, &(0x7f0000000340)={0x11, 0xf8, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@mcast2}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 453.268806][T13330] IPVS: ftp: loaded support on port[0] = 21 [ 453.300400][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 453.340460][ T17] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 453.392491][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.451447][ T17] usb 2-1: config 0 descriptor?? [ 454.021762][ T17] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 13:45:27 executing program 1: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050428bd7000fedbdf25110000000800a400000000001600bd00070079f01f00b590e3003f000900030000800000060010000000000006000100000005007400060000000c0043000400000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) symlinkat(0x0, r2, &(0x7f00000000c0)='./file0\x00') renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000280)=ANY=[]) write$P9_RGETATTR(r4, &(0x7f00000000c0)={0xa0, 0x19, 0x80, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x100000, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540)) fallocate(r4, 0x0, 0x0, 0x8800000) 13:45:27 executing program 3: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050428bd7000fedbdf25110000000800a400000000001600bd00070079f01f00b590e3003f000900030000800000060010000000000006000100000005007400060000000c0043000400000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) symlinkat(0x0, r2, &(0x7f00000000c0)='./file0\x00') renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000280)=ANY=[]) write$P9_RGETATTR(r4, &(0x7f00000000c0)={0xa0, 0x19, 0x80, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x100000, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540)) fallocate(r4, 0x0, 0x0, 0x8800000) 13:45:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 454.638394][ T7] usb 2-1: USB disconnect, device number 4 13:45:29 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="000425b97000fbdbdfe41101a1f07c0c250100d0586f576b6aab22a13219e06453ab0000b6cfd5bd8424110000000006000100000000800800050002000b000a0000800800030002000000080009006300000005000d000100000008080800c00200000800080008000000b400050005380000000000644f4155bf76a453ddc77a9b9543823d659e936dc51d153f2ee4440b551b7fced23f077300"/169, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES64=r3, @ANYRES32=r4], 0x88}, 0x1, 0x0, 0x0, 0x20000015}, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x516, '\x00', 0xe79}, 0x0, 0x200, 0x4, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0, 0x0, [], [0x62f, 0xfff8]}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13:45:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000df0f0000000000006e7cf9f2d7eaed41fed7ce753c4c09cf1992df0890a828da41919527c09f22cd0d7e836bf29c70c8c5126b41f2f60529ada547494726467e796f483057e944069ff531152d8854659474b2f50edb3dae50f0f83e5255c54e7e7968000000000000000000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32=r4, @ANYBLOB="30c1"], 0x48}}, 0x0) 13:45:29 executing program 3: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050428bd7000fedbdf25110000000800a400000000001600bd00070079f01f00b590e3003f000900030000800000060010000000000006000100000005007400060000000c0043000400000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) symlinkat(0x0, r2, &(0x7f00000000c0)='./file0\x00') renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000280)=ANY=[]) write$P9_RGETATTR(r4, &(0x7f00000000c0)={0xa0, 0x19, 0x80, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x100000, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540)) fallocate(r4, 0x0, 0x0, 0x8800000) 13:45:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 456.565911][T13486] IPVS: ftp: loaded support on port[0] = 21 13:45:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(0xffffffffffffffff) pipe(&(0x7f00000001c0)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, 0x0) recvfrom$packet(r4, &(0x7f00000002c0)=""/31, 0x1f, 0x140, &(0x7f0000000340)={0x11, 0xf8, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@mcast2}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:45:30 executing program 3: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050428bd7000fedbdf25110000000800a400000000001600bd00070079f01f00b590e3003f000900030000800000060010000000000006000100000005007400060000000c0043000400000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) symlinkat(0x0, r2, &(0x7f00000000c0)='./file0\x00') renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000280)=ANY=[]) write$P9_RGETATTR(r4, &(0x7f00000000c0)={0xa0, 0x19, 0x80, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x100000, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540)) fallocate(r4, 0x0, 0x0, 0x8800000) 13:45:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"/1039], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900), 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000001a00)={0x2, 'tunl0\x00', 0x2}, 0x18) r2 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x9001) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8) eventfd2(0x6, 0x801) read$eventfd(r1, &(0x7f00000019c0), 0x8) 13:45:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"/1039], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900), 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000001a00)={0x2, 'tunl0\x00', 0x2}, 0x18) r2 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x9001) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8) eventfd2(0x6, 0x801) read$eventfd(r1, &(0x7f00000019c0), 0x8) 13:45:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) tee(0xffffffffffffffff, r4, 0x8, 0x2) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r2, 0x0, r0, 0x0, 0x8ec0, 0x9) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 13:45:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e22, 0x0, @private2}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) socket(0x1, 0x0, 0x0) 13:45:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x100, 0x200002) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x189100, 0x0) write$tun(r4, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1044) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c0006", 0x25}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) r5 = signalfd(r2, &(0x7f0000001200)={[0xffffffff80000000]}, 0x8) ioctl$CAPI_GET_FLAGS(r5, 0x80044323, &(0x7f0000001240)) 13:45:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm_plock\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000540)='4\x00', 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000004c0)={0x4, {0x14, 0x9, 0x1, 0x5, 0x3}}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0)='gtp\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x40000) 13:45:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) tee(0xffffffffffffffff, r4, 0x8, 0x2) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r2, 0x0, r0, 0x0, 0x8ec0, 0x9) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 13:45:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 460.475907][T13577] input: syz0 as /devices/virtual/input/input5 [ 460.554976][T13577] input: syz0 as /devices/virtual/input/input6 13:45:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(0xffffffffffffffff) pipe(&(0x7f00000001c0)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, 0x0) recvfrom$packet(r4, &(0x7f00000002c0)=""/31, 0x1f, 0x140, &(0x7f0000000340)={0x11, 0xf8, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@mcast2}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:45:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="df70968727160a87c121f69e4129bb260ebd3dba58961215a096aba3", @ANYRES32=0x0, @ANYRESHEX=r0], 0x3c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 13:45:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0xfffffffffffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x11) ftruncate(r1, 0x200005) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000018c0)) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x10, 0x3f8, 0x20, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x400408c1) keyctl$get_persistent(0x18, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r2, 0x100, 0x1f}, 0x0, &(0x7f00000002c0)="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", 0x0) 13:45:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:35 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x3, 0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/$.\x00') 13:45:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'veth1_to_team\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e002a000000e8bd6e0eb80314000e000100240248ff050005001200", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f29}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) 13:45:35 executing program 3: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b03040000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) msgget(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x166) [ 462.192939][ T34] audit: type=1800 audit(1608299135.396:46): pid=13615 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15756 res=0 errno=0 13:45:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'macvlan1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="37b8968e0f2249ccb191e9fa7093e7496b7d"]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xc1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x7ff8, 0xe, 0x0, 0x3a5c563403771cbe) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x800000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r2, 0x0, 0x0, @ib={0x1b, 0x3, 0x3, {"44fd5965fef3d336ded6c84c87bbc2b0"}, 0x5, 0x9, 0x2}}}, 0x90) [ 462.293409][ T34] audit: type=1804 audit(1608299135.486:47): pid=13615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/167/file0/bus" dev="sda1" ino=15756 res=1 errno=0 13:45:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xc006, 0x3, 0x2, "bc1b6d6bc8aaa435a2434dd896c493e4d921538836a38ec800c019471326fc87", 0x384c4150}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES32], 0x58}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="ba2000b000eeba430066ed0f0836f33ed8b60800ba6100ed7c00baf80c66b87fc6d68b66efbafc0cb033eeb888008ee8d92526660f38805b00", 0x39}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, 0x0) 13:45:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 463.009933][ T34] audit: type=1800 audit(1608299136.206:48): pid=13620 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15758 res=0 errno=0 [ 463.079709][ T34] audit: type=1804 audit(1608299136.256:49): pid=13620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/167/file0/file0/bus" dev="sda1" ino=15758 res=1 errno=0 13:45:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0xfffffffffffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x11) ftruncate(r1, 0x200005) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000018c0)) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x10, 0x3f8, 0x20, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x400408c1) keyctl$get_persistent(0x18, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r2, 0x100, 0x1f}, 0x0, &(0x7f00000002c0)="f5dfb1dde73344041f000000000000003be938eaa74fb80049cc511898ca48f7152dfbbfc67e64c79eff66cd6d70232d5d58328664d140caf1fcb1cd93543c85ed426e10cd5f705033915e7ca6abf66222e7f500000000000000001ba37b5ceed3516b0b134455ec3cd7bac4b4703f9b55a124880e5e694e735329e2b8aa5b8eb4415a7429837de56a9143cf20fab521686e47ac5c49f7a025aa7ddb919e3e88764f3cdde58cfc8075b5bf6d09a7fe73dd7cff9f08849ef5ae5682f05a0f7e96040a054bdd27f27a887afd244544924dc52bb6437826c93bac8e3c5d8ef53b20fef7ad1fdc9410531c2e04f93f69fb69216b53201a758b94cdb7a54866691662", 0x0) [ 463.218392][ T34] audit: type=1800 audit(1608299136.276:50): pid=13615 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15756 res=0 errno=0 [ 463.333704][ T34] audit: type=1800 audit(1608299136.456:51): pid=13650 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15756 res=0 errno=0 [ 463.609146][ T34] audit: type=1804 audit(1608299136.496:52): pid=13650 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/168/file0/bus" dev="sda1" ino=15756 res=1 errno=0 13:45:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 463.862541][T13649] device batadv_slave_0 entered promiscuous mode [ 464.151741][T13650] syz-executor.0 (13650) used greatest stack depth: 22288 bytes left 13:45:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x4000000, 0x105182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x850, 0xfe, 0x3, 0x3f, 0x9, 0x4, 0x3, 0xff, 0x40, 0x1, 0x6, 0x100000001}, {0x80000001, 0x7, 0x1d, 0x8, 0xd1, 0x0, 0x5, 0x3f, 0x7, 0x9, 0x0, 0x0, 0x4dcd}, {0xfffffffc, 0x9, 0x3, 0x40, 0x5, 0x7f, 0x60, 0x1f, 0x7f, 0x1, 0x9, 0x4, 0x7}], 0x4}) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44238, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x24002e00) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000400)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x400c098}, 0x4000800) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000200)=0x4) keyctl$set_reqkey_keyring(0xe, 0x1) 13:45:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0xfffffffffffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x11) ftruncate(r1, 0x200005) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000018c0)) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x10, 0x3f8, 0x20, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x400408c1) keyctl$get_persistent(0x18, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r2, 0x100, 0x1f}, 0x0, &(0x7f00000002c0)="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", 0x0) 13:45:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 13:45:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) socket(0x100000000011, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x42, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0xee00, r3) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:45:38 executing program 3: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b03040000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) msgget(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x166) [ 465.723407][ T34] audit: type=1800 audit(1608299138.926:53): pid=13685 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15752 res=0 errno=0 13:45:39 executing program 3: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b03040000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) msgget(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x166) [ 465.854940][ T34] audit: type=1804 audit(1608299139.026:54): pid=13685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/8/file0/bus" dev="sda1" ino=15752 res=1 errno=0 13:45:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:39 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000000)=0x2000000) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1, 0x13, r0, 0x82000000) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x7, 0x1db0]}, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x1d1b5e94, 0x4) [ 466.206875][T13701] loop4: detected capacity change from 1036 to 0 13:45:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) [ 466.253095][ T2057] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 13:45:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:39 executing program 5: unshare(0x600) socket$packet(0x11, 0x0, 0x300) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xfff, 0x97fb}]}, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair(0x1d, 0x5, 0x3, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000340)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000480)=ANY=[@ANYBLOB="09000000f19f399ca06f60e1c44e9bcb0f157815e2e965ebdd014a56525e0cfc9265748d8c950899d801cd2e389bdf64e3f41b5619b6f050776183732e7cf101afa303c2cbd0b441c72368535a6131e65515c136afca5a2326147e4e911614f4f32624d79d0c917d2886f1e7d2fab579840098ce2e1aeef35618e33614f5453b254f842b72a4cf43d0ad0095b7"]) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4a, "2299e99eac7b55e5cf3b86acca4a1fdeceb50f7703bc88eee71670a7f5f508f63d831d00e11b22c97ee80c1856efc7b586af2426cbf9a0b38cf53ba413e0e0b09dff4af5fbec8d5a1b5d"}, &(0x7f0000000240)=0x6e) ptrace$setopts(0x4206, r0, 0x0, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') 13:45:40 executing program 5: unshare(0x600) socket$packet(0x11, 0x0, 0x300) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xfff, 0x97fb}]}, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair(0x1d, 0x5, 0x3, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000340)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000480)=ANY=[@ANYBLOB="09000000f19f399ca06f60e1c44e9bcb0f157815e2e965ebdd014a56525e0cfc9265748d8c950899d801cd2e389bdf64e3f41b5619b6f050776183732e7cf101afa303c2cbd0b441c72368535a6131e65515c136afca5a2326147e4e911614f4f32624d79d0c917d2886f1e7d2fab579840098ce2e1aeef35618e33614f5453b254f842b72a4cf43d0ad0095b7"]) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4a, "2299e99eac7b55e5cf3b86acca4a1fdeceb50f7703bc88eee71670a7f5f508f63d831d00e11b22c97ee80c1856efc7b586af2426cbf9a0b38cf53ba413e0e0b09dff4af5fbec8d5a1b5d"}, &(0x7f0000000240)=0x6e) ptrace$setopts(0x4206, r0, 0x0, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') [ 466.841382][T13727] can: request_module (can-proto-3) failed. [ 466.847492][T13723] can: request_module (can-proto-3) failed. 13:45:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:40 executing program 0: unshare(0x600) socket$packet(0x11, 0x0, 0x300) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xfff, 0x97fb}]}, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair(0x1d, 0x5, 0x3, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000340)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000480)=ANY=[@ANYBLOB="09000000f19f399ca06f60e1c44e9bcb0f157815e2e965ebdd014a56525e0cfc9265748d8c950899d801cd2e389bdf64e3f41b5619b6f050776183732e7cf101afa303c2cbd0b441c72368535a6131e65515c136afca5a2326147e4e911614f4f32624d79d0c917d2886f1e7d2fab579840098ce2e1aeef35618e33614f5453b254f842b72a4cf43d0ad0095b7"]) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4a, "2299e99eac7b55e5cf3b86acca4a1fdeceb50f7703bc88eee71670a7f5f508f63d831d00e11b22c97ee80c1856efc7b586af2426cbf9a0b38cf53ba413e0e0b09dff4af5fbec8d5a1b5d"}, &(0x7f0000000240)=0x6e) ptrace$setopts(0x4206, r0, 0x0, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') 13:45:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10}) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x2, 0x200000) [ 467.161885][T13736] can: request_module (can-proto-3) failed. [ 467.313907][T13744] can: request_module (can-proto-3) failed. 13:45:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xdd1b7ce543d1693}, 0xc, &(0x7f00000015c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x1368, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1334, 0x3, 0x0, 0x1, [{0x122c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "4118310922e064054026fb4e28c1b5a11e360d6d5a1f9011d9928b45c30dd8e66dc97ab9b27318e169a6"}, @NFTA_SET_ELEM_DATA={0x70, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x69, 0x1, "ba3c147d7797c96249ce7d240f383c916e7f50b177678905bacab155821de91b21a071843f9fb6a3191e1ef2f3b4e9cc6477037c8b159946f8d678c88d4a196a1ca67fd8420977118f80d21a661eedbbbad55ce7e43ccbde6a49cfa68d92f9a61006fb4fa2"}]}, @NFTA_SET_ELEM_KEY={0x1158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xd}]}, @NFTA_DATA_VALUE={0x94, 0x1, "b520b36f845d105c70c4ff9eedaf95d4175f12c87f88c3f1bd7739ad06de74e638bbc7378089c8d78621229f52960b22afdc96e703583ca6c0081d8a302928dbe2a6d0f7baa32c6a89c5d4a7a4589e24b515f7c3cc44cac11e3a4346042905dbd100e6460c9b38a0088a633dddeac010146c8685e6f5a646a3cf07aaa5f2c307c8f6a16af1361081b06382a858595958"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x162}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "c2a68269c4e4d0d787b537f8e1fc5579b7b09a9a4d6fb426a23ad4c5c2021b92ccfe8f057cc7225c80410d3d762585c8e0b38e925eac4c64938a1f91f135f72f7ef6b9b55005a8ada8e444f17ea8a9bd409a1b498668f3acf9f481e47f2ccd82308babbad527a9a118484ef4b0900c24f78c640e5889effbe29f4e5da3116d6e6b756d94eee8391b5a16492d8f9b1c19c6db616cef4fef708b7ce0f8fa03006a022ee84fcf77eebe61c6382f3924635f1ac8ab39dc918fab3a4648abba8928"}]}]}]}]}, @NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_SET_USERDATA={0x8f, 0xd, 0x1, 0x0, "40270cee8dd1f40ea88021132f3a0edc4116a03fd8eb47492474e6ecbfa0b65d3f8c532f2f29f657ee276064d00f55700a0daf437e9beaccdbe6ffbbfeb4813627598538d08b7088f2e37b4ebf974ef2d5cd844390249561e952011ddaad3ed29570ef2eeae1c80640c48e590d61bb641b9af1019aa297f0ea635b0346342072539243867819f53f716a5d"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x48}]}, @NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ed}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x1538}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 13:45:41 executing program 5: r0 = socket(0x400000000000010, 0x802, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x17, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) [ 468.249758][ T17] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 468.799819][ T17] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.809261][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.817400][ T17] usb 6-1: Product: syz [ 468.821718][ T17] usb 6-1: Manufacturer: syz [ 468.826316][ T17] usb 6-1: SerialNumber: syz [ 468.881113][ T17] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:45:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x6d, 0x220401) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000280)={{0x0, 0x1, 0x10001, 0x1, 0x80000000}, 0x80000001, 0xfffffffa, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x8000}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = memfd_create(&(0x7f0000000140)='#\x9c\x1c\x82\x90\"\x15wQ\xfd\xb8V\xf1\xa1M\xab\xaa\xbd\xaf\xfb*6\x98\xf1\x95U\xe0\x9e\xe0\v\xf1\x1c\xa0\x80\bk<\xf2\xebv\xb5\xf6\xca\xa8\x16bW2tB\xf3\xaf\x1e;@4{\xd6(\x8bU>K?0\xbb\xb0\x0eiVS_\xce*\x93k\x02\xabDD\x97\x91\x97\xca\x8f!~((\x8e\x0f\xef\xba\xbc\x93+\x80\xe4\xaf\xb7M\n^\xb1\xd9\v\xab\xe0\xb4\ri\xfc^n`\v\xf5!\xb6\xfez{F#D\xe773\x0e\xd2sDj)\xbf\x92\x00\x00\x00\x00\xa5Z\r\x80\x9cd{9A\x19\xf7\xf1\xf3\x98\xa0%KA\xc1n\a\x1aT\xea\x03\xb0*\r\x05\n\x95\xfd\x84\xbe\xc0\xa6&s\x14\x15\x82\xa9E\xcaH\xdf\x96\x00\xdc\x8e\xbb~\xfc\x9a5;\xe3\xf1\'\xaf\xdd\xcc5\x1f\x9c\x7f<\x80\xb0$\x87\xceTS\xb1\xa6\xb3\xc22&\xe5a\x82\xe1\x00\x00\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="c2ae0132a13f0010b32a2d1465301bf9c3022021bdeb28ccb77217dcfef8207fafe7dbd15f00000000040009d33aebf17c7702d242ab43a2772289fcfcdd594639b72a094cea0b4a458b5e7d4b5ebf2e283fb4c44c78aa5a3535a94625d06245f83e8023040f6378a903928b1184f67291584302405686ba8df5bc490984aa4948eb5e55"], 0x291) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x6, 0x6c, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 13:45:42 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB="0913659948c27fb8155331fc5a51cd9b1e828186726023baf24e0c9d8041117c9e74104b1a7c56beebbf36bf3345103e95541d8c31d057ddb4617f7d79d449864e7242c1b4f9b7556131ddb6242ecd929cdd67be34cbc268e2075c10ce9956b30e34c5b4c5435c7700cb96ef4cb5fb41747af732593df2c0335a25c1cddf6cc77a800a5d5351578973929be00386b3f8e108017ec736c7", @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="cd0fc717acb07bdf111d3eda89b76e4010d98e44"], 0x6) r3 = getpid() pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') sched_setscheduler(r3, 0x6, &(0x7f0000000380)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x2, {0x1000, 0x5, "446d9c0b0a1a9ba076e15c02b195d58a2c7b7f2be3f59bacee76413bb268e99bdd10ad23036dee0751c83e87a98df0161f3d66d98f659878effd1c3c39cf5abd0629eef21efc9419404c20488e09f769e5ff2ecc00d7b0d1507f89d82410dfda83ce2524ef47bb524ba2fe01495e99febcfd7f3deb008780d3b1b535e4a6734df70c4ae650366e503e2103f01e6f53e0b40077763553c14c03e7417d3413bcab002aad657d5dca8a9ff44a386803fffd9defcf583527b4c253ca24c69b96a93716b319d74e0cbf47d94b577f88500fcbb50dc58b113c6f4fa85340a9c7a15598780d560d71285ae76e8af737e5e851715308e3392b28b52a2814c4e0fd52de00", 0x6, 0x84, 0x2, 0xf0, 0x8f, 0x0, 0x1f}}}, 0x128) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r5 = getpgrp(r3) migrate_pages(r5, 0x8, &(0x7f0000000040)=0x10000, &(0x7f0000000100)=0xc4d) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 13:45:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r3, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) fsetxattr$security_evm(r3, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@v2={0x3, 0x1, 0x11, 0x134, 0x59, "6a52c450af3fc7a77ec11eae955c1e82326e69cff2bf7f4499fd9d361efd4aea46a31599b48f608314bfe3a51f64a08b3f1c30db1cbbc0596f16af7ea30d01a38db1b8a3889524257da7fcad83f54decfc97f5a4167be0f8f0"}, 0x62, 0x0) sendmmsg$inet(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="f3", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x604d807) 13:45:42 executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001340)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="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"], 0xb0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 469.161633][T13783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:45:42 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:45:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0xfffffe01, r0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 469.539724][ T17] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 13:45:42 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 469.748543][ T9818] usb 6-1: USB disconnect, device number 4 13:45:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:43 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 470.119628][ T5] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 470.389592][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 470.531336][ T5] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 470.559574][ T5] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 470.568388][ T5] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 470.608177][ T5] usb 4-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 470.610098][ T17] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 470.649611][ T5] usb 4-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 470.660847][ T17] ath9k_htc: Failed to initialize the device [ 470.678786][ T5] usb 4-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 470.687415][ T9818] usb 6-1: ath9k_htc: USB layer deinitialized [ 470.719485][ T5] usb 4-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 470.849591][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 470.858696][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.879974][ T5] usb 4-1: SerialNumber: syz [ 470.946351][T13804] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.977575][T13804] raw-gadget gadget: fail, usb_ep_enable returned -22 13:45:44 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r4, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fallocate(r1, 0x100000001, 0x80000, 0x28120002) write$fb(r0, &(0x7f0000000280)='t', 0x1) 13:45:44 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @private=0x5000000}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0xfd00, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x32b}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fchmod(r1, 0x42) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02d799d1c39632770700000000d800527a2f810b205e63952ceb56049ee188115e3c16099ef77739e15e199c61e6c5917f3c014c3e032d140362c76d911f000000b6bce1f5faf4a70da46e8959e0bef1b17c95fc2927e3f02beaea23d8d19f28d3c30bb8a4a234ed861561dc93a6700f0e4c4364905752d3b68f76963b39c0dd6b50a6c088615ae6beb2fcaf2226006830155a51caa3199e0e1c48f66c941805bc42895899b57501b7a624c02e515bd2965da4650010000000000000eddd797f60ea5d7d67e5ee54b52c34ecbda1ae7a3dbe2871e20b9c6b8f3a063d7c0b7b253dbdc0350325b7a58a6f13b80d8e7477d52b", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="4c7d0000003fa0b75b09673b4ae6085e5c6f9ffc5e3d2e091085e65dbc35b728c036eca2d2fa6bba5b0ee74ca33693a6aa6bfe7b50a017f28fd3b85d1e1b6c42d5638470f994b8bce27c664fea76cacf2f2a769fc03ff820733b74b48f03b6fdeedd5778a4281872cf3aa3de51d7ecf7", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x64, 0x2) r3 = socket$packet(0x11, 0x0, 0x300) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x800000, 0x2547}, 0x1c) sendmsg$unix(r4, &(0x7f0000000880)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000003c0)="06425fd5ef9aee301ba86fd7f216602ee6b8b0a8464a4d5b4331f0b1043fd308f2d045e1047b8a56c8895aff94557cba49dc6b988d37f72de1227eb3d161d8be5dc95ae0ac12499e092bebcdd9bc96548b876bd6c494fe675a18fc9a48ec7055c4eb6e3062ea83d85140269c79c3b3434518f9004ffd31abc51c08115f3ccd3e8e4ba025bd01637acace4792ce3d377f33d6e81a0b8cd393d2ed389f462064912f41de53c8e61cb9", 0xa8}, {&(0x7f0000000240)="ddee732edd854e1fab", 0x9}], 0x2, &(0x7f0000000800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x4000000}, 0x4000041) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/88, 0x58) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'bond_slave_0\x00'}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000180), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') 13:45:44 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:45:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 471.048765][ T5] hub 4-1:5.0: bad descriptor, ignoring hub [ 471.057240][ T5] hub: probe of 4-1:5.0 failed with error -5 [ 471.098878][ T9818] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 471.185009][ T34] audit: type=1800 audit(1608299144.387:55): pid=13848 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15769 res=0 errno=0 13:45:44 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) [ 471.425268][T13804] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 471.435618][ T34] audit: type=1800 audit(1608299144.637:56): pid=13852 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15769 res=0 errno=0 [ 471.475377][T13804] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 471.607797][ T5] usblp 4-1:5.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:45:45 executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001340)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fb053bb87170b1acd4614bdbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00b80000040000000000000000050012000000000006001100ff03000008000b00000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000004000006001600050000000500120001000000060011000300d05ea510d859378df74cb975e33ea1935eae4d0952825965f304acfa30d40e7cd3b91bb1a3ab202589cd1455b589ec46745d8bd6a18badc32e523ede3943195292d3fef01b4fa185fea972fa5ac2ac2758058894abc23e0070d99e8a7de31c4c8f7f0d"], 0xb0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:45:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) 13:45:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 472.069747][T13804] udc-core: couldn't find an available UDC or it's busy [ 472.080739][T13804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 472.234011][ T3199] usb 4-1: USB disconnect, device number 4 [ 472.266747][ T3199] usblp0: removed 13:45:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}}, 0x0) 13:45:46 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) 13:45:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:46 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:45:47 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001e8b2f088117380928920000000109822400ff0000000000000000023792abe10805850b1000000009050103"], 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) 13:45:47 executing program 3: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xea, 0xb7, 0x40, 0x20b7, 0x1540, 0x3233, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xffffffffffffffde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000001e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x3, "986a91"}, 0x0, 0x0, 0x0, 0x0}) 13:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:47 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:45:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r5, 0x0, r4, 0x0, 0x8ec3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x104, 0x6}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 13:45:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) r3 = socket(0xb, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r5, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@dev}, {@in=@multicast2, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:45:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x80, 0x4) socket$inet(0xa, 0x6, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xe2) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @local}, 0x1c) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x2}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='ip6tnl0\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x66100, 0x0) 13:45:47 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 474.498861][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 474.578920][ T9823] usb 6-1: new high-speed USB device number 6 using dummy_hcd 13:45:47 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40), 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:48 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 474.839018][ T9823] usb 6-1: Using ep0 maxpacket: 8 [ 474.860992][ T5] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=32.33 [ 474.882343][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.934853][ T5] usb 4-1: config 0 descriptor?? [ 474.999717][ T9823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 475.007579][ T9823] usb 6-1: can't read configurations, error -61 13:45:48 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 475.239121][ T9823] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 475.508853][ T9823] usb 6-1: Using ep0 maxpacket: 8 [ 475.731361][ T9823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 475.740116][ T9823] usb 6-1: can't read configurations, error -61 [ 475.746684][ T9823] usb usb6-port1: attempt power cycle [ 476.098862][ T5] usb 4-1: ATUSB: AT86RF231 version 0 [ 476.321132][ T5] usb 4-1: Firmware: major: 152, minor: 106, hardware type: UNKNOWN (145) [ 476.329783][ T5] usb 4-1: failed to fetch extended address, random address set [ 476.337459][ T5] usb 4-1: atusb_probe: initialization failed, error = -524 [ 476.345669][ T5] atusb: probe of 4-1:0.0 failed with error -524 [ 476.468561][ T9823] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 476.522010][ T5] usb 4-1: USB disconnect, device number 5 [ 476.588781][ T9823] usb 6-1: Using ep0 maxpacket: 8 [ 476.748594][ T9823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 476.756296][ T9823] usb 6-1: can't read configurations, error -61 [ 476.908506][ T9823] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 476.998537][ T9823] usb 6-1: Using ep0 maxpacket: 8 [ 477.158516][ T9823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 477.166231][ T9823] usb 6-1: can't read configurations, error -61 [ 477.174053][ T9823] usb usb6-port1: unable to enumerate USB device 13:45:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "3f522bd7de639475f4587fe23b171179869e966adba596356da6aba4730dc25c8208685766007814b0df8b9a5a1c03bfb4e3caef5dcefe493b04a926d8cc4b8207bd53a537c88938ca66f08e1d11287d914b815c2b212212c5fcf2304fb5ff0f67017100b14f894f8c40dd1847ad67f22f257ef073a92e3c35a27dc16ad1c9ded92563cb05deb43ce339614d0d552eaa94daa3311b8e5a2f891d131efd45b2c401e85af50a47294e2eb7a0c6dfdd07da0c19e359b1435824de336f9ffdf5acaf756d764bf7702d67844cfb09c431bc33a594c07f95376e5f2e844a39a9f447b711ad51a7f1a55d01137d1aac55df44af9b9c68691e5c480251988d4562ef2a9726cc94366922dc07d02f2825a13f6d1f0e8a3db815ed5707284f72f34fbbb40c40538a75b8c730b7b2bce86966b863f42d64bf3a748af3037f307cbe94aef6a6554cf283d782ffb0089efefb673bcbe8a8349edbe134266e4a4efb398fcad3b10c4973d6e5af2839574eb09f0ddcb87522f74fce6e8c5ffccd582a15be8c527fb5fac177210cb87fe01c6415624e095ac3cdb9d174a3d32de76e67b1448ae7d9b9069febf96424301894f6b294c12e4c226530ee157b3e3e6cc665bc5e39dd5a322856e4e95d161298a55286ca6770ebe8abde79b44e024efbb151bd338412bec5a094b8dc649e20f54c77a62cf1fb66cd9a013fb73e8a1250b385e0de70d13fa0eee47c8af7093ede6589636a18fbfd8e1272b3970c6f541d052e72bbc43f74c14c3bcfc1df34a445798b7bebfc721a2f9cd03217d886800e384fbc8338e733b93b8d105d2a3713650bc18dfa00caf63a8463aa9fb0e18569943500056ca40b3ad40c7c3f75aa1ac7c9303651a0445a50a2b34e7b7be595df03f224accf393a7d8b4eb6cee6a010db59f28432c24b07637fea1e461f55f3838a423ce1add011171673f19afedb9e94d7fc85c26c0779253b63cb0d1b77e92c0bc4466894d1954e9465e23e9fcbcb7f49dead69c62b0c7fb118ca8d18994cb41567bc58934649104b76e457698ae6885cfe5e12622ea79969d1af463693283d086a74ebdeb5fc4f288f0b87e18cb9caf07965bde54bde58834896bfe21be8724d04875817c8716b045e6924c574f4a0190ef2a478f8e50981cbd1062f3f632990b2357032b384c88043c1d775da9afe28e5a59bc7e782d021a5ac6ca62d89acf350247d2497f1c2cebbcccd7cb8b1b491bad640738bb396788c216a967cd36a39bd7ff106ad84aedb186c16ab339752c86c58dd0fc4669f3dc6c340c2ea2040571787332968a0535502c2a146d05d928285aa77ad957946b6f25426c16d26ec8f118c4f961e14c29811487a3655cf37ddaad223200af38c9e62d46e9d9b9923a95f9d39bc45e00740293ad645977a68192ac90b61ed0917c91deb872b967254ef0e42e8fa3ce8ad3855cb146a66acbd34bbff35192bd8628017a587c51ff98030acd89e9a3f7e06af6831f3d6f4b48dc5d4ceefc802b01c497e13b726146fa5f1d64277b636be859d3aa835a54f34b0a036de266c99811ec9c0fbff62882a4d8308c3166d068871b49e2fa375e40bee3656bb3c79212503348253d93dd0d6b7e303769b80e74cffd1484d009f3bc24cf5b5a87b6421dc217e0d2f459c2c41d0a184f090c4437da12c4d23ee78d6502b02e51187fe1fa325b600a27383cb39f2c8828b171cb9d04e523331c9d0dc34f01cc6632c93f06eb776e78dc45fcb35d2290156a25c5a887edb5531ba0fad77f2152e915f84c3a860f25f70592c391a04ab550c77dc7305208abbb7ea63c92b4a5174d0aef0736124100363e68b5493b7827b239407af7a6dc862554452909e425fde159ec9a7bf301f79f64a8d23a9caf5822c62361212fb932dd57c420d9ccca450e8a4a65dd027574c81dec9cd8d3d1b1522bddb68e8a9aed547dc8c1c521ac7e8c6a9614b5f0cba4a5e11bf5d5758f2bdafd204ea8d2a619ea6184d3271efc6d6a7ee9365f0cecba24e7d3f026453ff2b26db2fe8ea5d653fe5a520372a6ab54620b87847139e47d9b9c91b0182447c2662351eefe172e183ce1e2b3480caac9ec3ffa2cf4f49db739dc846a4466ead9bb76ad9189f4acfe3fd38f7f71efd3f82de6666c2fac5449f96f4a530eecf0a9d61bac82516fe63b500b62a8acc9d8a55cdba0c56b9bc12dee178578ab5ba5bddc466cd0536fa36597e993c5b8b7062549e439efa3b19cf9cd1f3e0ebb448a2fd17d1e4a9afff595a503ce1078bc2f4bf8d8d504029dc197fb50013b4628cdae638e2e08e0b087d2260ec45758bc2f81a4b3be9b4cb69c1535c0dfc859c83c79f8660e9e0520f74ec3d350673eb1c2cc1ad78d4b407d6a97556cd2dbdd862c6084d5e2451eb8e0973d8f3cd74b30589dd519274b006b31d613f472d4a84ae72795c8dbf00b8c73d777c2fae26efb89a3762db5744f316f4345c0bef02ec63ce223a43e6efcf219128743d0309f03c2456171c8bb63a1e57ff289a6439c7c0812f13a3a9e3642712688d0ecaf55cf0b41b245fda6c4acdff05288381637c941f166de974dda40bef43a8b2548c7ad180bf0a58573cbcade1c31dde65712db571b9f6fa9e2679176e0156e0a057deca76335d9c948d0aa15ec9b37c75fc0c371801366a015560b497d06918ca3efeb401aa95295642b31c0ce009ec40d92d0d3d1bae52ea632193cb1797af9e9bc8fc61dc3d5008a81072886a36ca58b03de19e5823e38ae7b09b047ff198dbca897cb2afadf4bcf47843db8a52a1c15bb1ce1bab9b2dfb5d5ab489643dcb647f654b973923bed91e0c72129b893b8c067fe2764a0a67c6e56f54b59b4daa3d60f2b2397611cda9d7be9ac4dfa6b440675cef674a31460475139f5e3ca448d28fa47d06a1e78beabd82ab00cc32a90f4d39d8161751424fbbde2b51cd2454b8022e2933e2150fb9c3267f7f8d0bef569afa286d382ae471f7868b90dffb15d5836f6d37501f5cbd98ebbeb604f6fc118e27e867d8ee26c1ab8b6d575f80de064199978de5bc43c1ba1172927949c1a27ff95a91c611622e8c3de9758b794547cb499061dc5e4d4d267df12f9c0a779b52e36af978ae21fab7a86accd9a617d2e47332a02ce67423b4c4c91ab980054c3d576463eb928e83c7fdf5653b7698174c1da9e966e784e1c6c61c08e6713a5101022ceb1e9a0d9e2c2e815e4fd18faf7823aba424c2df1ccebb18ca0b687a6716c3b8bb87d4351e9466c70e9cd37328f36de6cdb8dca5f70b2930009d84d293563d17f6632fa78ca385bf227dfbe0d0ff06d41079f3a98642d2d35fadd81456a565fc4c6d26fcff88e5b7a8f4ca0ff947d71f7e8554b69aab15dd8bb97a604f9d43f09d4af3c94021c0fe264413c1f16d7fdc048b37c8920c788b727fe3024283d6b9adfacf302066c601b63b2b9e4d1d5079199c1e699eeb391eac9369deb77581bb4957d7fd73c73eebf2867dabcf7a1c5a9d561543af0459063480551c14df1b8b34d697e7c983685c9a84d14a434af2580ff814e8d136e30ad66f28b77144595bc598b9d2e8025a92339f960fd619fd6409286ea2b6af9eb6eb941a2940ec59c204c7074dc7cd69c097bba44345f0927668687b902a97d74152613e94cfdac2889269e6d70352c0b3953e69e852f9a2d5501a2208c59916975bacb888e74fe17c1f1be1b98ef597886ead58167449579f735d3acfd3be23aa974fa80a7756373e69b0cb592cae4b731a30024ceff31b4a9285d6de86c2cdc0cb58ee220e2b4696f356cd87847137c95897d49c0470ac099cc20a88f446e6468ec12a81394846beb2438090602576cafea8a83f6226e2b90c68b494965e85f5f0e9828f3af76283328c7dd7ef3b71b066b45e5c5ead76a871f01958a2dbf6fbd5e44574c93da4841f205b43740e1f59954fb57083bad4bb3723e507f965f3892e3d173162ba83f7ddb84a69595e196b8f92aced0db31ff9eeea3b2b018b97847918c1f1819c55f561faf7fe57288d3d7dc9f955e1ec83abef7aedc79ec96ec8990679baea55268df3ea27c035f31a74e72c3c67010afa85a0e1fafd874a0e6194d728bf2c3801122747935964398631476ac3d1fde43c04f74655c36555de4c119e0296a32d0a11aec12c63810c81f03dc739be2214ff570fe7ff54c95745977731ab2b416a6df977c2be0911d9fd8f3a58d124c81067c54307f91a3b750202837808f8dca6177f03ff32f4b6565dac3903aa74fcb9d3660f6a550fe368c6e43049b6a0df346623a2402039bf68ddac36008393911ab7be203e89f92eae2dccecff2e6ce504761e120e2158ce3750e610ace9e7ac7e14214ef2fcf96db3654dece5aec0cc293f53d086d105af6ae831084b62043c73f564ee76e3c8353b3263aca5816a9a3a474844a94cd5caf85ba1682f164fd3e7b930b6628cdd6fd4aa060902557c545accfe4da82fc2caf10aa61d381b6db0bfae6a7ba2d8bef03c7bd89285fe92abbf6dcf6edd1e58152508738b7a87549046035a2cd0caf1fc97a3dc9cf650200d04911e72f0a08e4a60dfb444cf4720749809e056b19292c8348495dee262487aff4ed1750f6025c987e91d3286c5f8ebf7f0a904dadeb9b6841728052726b99f434fc7bcdcf1d9811b321e7b04e5bb118c3e02e6acc91480a5ae6b6e6182bcdbd8d86902a0ceea1fa5782b74953e9093c7bd8287c7a3b7b7532c41cf933b23df0e0246adcbcaeb34df63cb014b410d6d43d1b043eadf73e1a565bd164ec02b42e0f7148549b958d65495c8b2611504256ff57f6c29b0453bbe828adf8061780956df96e801cbe63c893f3a98b6f063307354bbe989d4314d617584bede299c0905b5106472a130e67d7af8a28cdbdf7e2e6b5d495ba5bc2284eea27a043471a9b6d4f745539100e5160c8b09d85e512b088932006dee28d859c2738b6c8f745876ab3127ea0af7cc4e65cbffa1b3602db7044617cad2c67ba7d3fabc341c6826f5099e6b303d5fc5387555ef3fe648cd9f9a5faebc31bb31c6b2a950273027257e85b5c5a5b6daee7e34e8c33f854bcd429d1c70fcbb0a6022a7fca47d8e1a36aa47c182b9bc590d140066447a0738dcb27511b102dbae53fbc49415b8ec2042d46774f164239edcbe529bbe99e15246f99f17520e42e706032082c7e1cefa099c8d088d8d827e7c8ca49337c8680df71d772d89e5fb3999a1d62c204776bd8c6fc62441bb8f839b35937ed020e36510ff69a386483ad66b19e0279d23f6751ac677af0695316fb57d2557d19153075962e78a59d13101d4901c168e5f55b2acf707d7db302fb819e3ffdfaca6da3f3407e027d300a8fb334727f850fe345f209a8772233523e8eb841b5e744389acae2950356f362239f76915"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001440)) r1 = syz_open_dev$char_raw(&(0x7f0000000080)='/dev/raw/raw#\x00', 0x0, 0x880) perf_event_open(&(0x7f0000002440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r3, "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", "3f522bd7de639475f4587fe23b171179869e966adba596356da6aba4730dc25c8208685766007814b0df8b9a5a1c03bfb4e3caef5dcefe493b04a926d8cc4b8207bd53a537c88938ca66f08e1d11287d914b815c2b212212c5fcf2304fb5ff0f67017100b14f894f8c40dd1847ad67f22f257ef073a92e3c35a27dc16ad1c9ded92563cb05deb43ce339614d0d552eaa94daa3311b8e5a2f891d131efd45b2c401e85af50a47294e2eb7a0c6dfdd07da0c19e359b1435824de336f9ffdf5acaf756d764bf7702d67844cfb09c431bc33a594c07f95376e5f2e844a39a9f447b711ad51a7f1a55d01137d1aac55df44af9b9c68691e5c480251988d4562ef2a9726cc94366922dc07d02f2825a13f6d1f0e8a3db815ed5707284f72f34fbbb40c40538a75b8c730b7b2bce86966b863f42d64bf3a748af3037f307cbe94aef6a6554cf283d782ffb0089efefb673bcbe8a8349edbe134266e4a4efb398fcad3b10c4973d6e5af2839574eb09f0ddcb87522f74fce6e8c5ffccd582a15be8c527fb5fac177210cb87fe01c6415624e095ac3cdb9d174a3d32de76e67b1448ae7d9b9069febf96424301894f6b294c12e4c226530ee157b3e3e6cc665bc5e39dd5a322856e4e95d161298a55286ca6770ebe8abde79b44e024efbb151bd338412bec5a094b8dc649e20f54c77a62cf1fb66cd9a013fb73e8a1250b385e0de70d13fa0eee47c8af7093ede6589636a18fbfd8e1272b3970c6f541d052e72bbc43f74c14c3bcfc1df34a445798b7bebfc721a2f9cd03217d886800e384fbc8338e733b93b8d105d2a3713650bc18dfa00caf63a8463aa9fb0e18569943500056ca40b3ad40c7c3f75aa1ac7c9303651a0445a50a2b34e7b7be595df03f224accf393a7d8b4eb6cee6a010db59f28432c24b07637fea1e461f55f3838a423ce1add011171673f19afedb9e94d7fc85c26c0779253b63cb0d1b77e92c0bc4466894d1954e9465e23e9fcbcb7f49dead69c62b0c7fb118ca8d18994cb41567bc58934649104b76e457698ae6885cfe5e12622ea79969d1af463693283d086a74ebdeb5fc4f288f0b87e18cb9caf07965bde54bde58834896bfe21be8724d04875817c8716b045e6924c574f4a0190ef2a478f8e50981cbd1062f3f632990b2357032b384c88043c1d775da9afe28e5a59bc7e782d021a5ac6ca62d89acf350247d2497f1c2cebbcccd7cb8b1b491bad640738bb396788c216a967cd36a39bd7ff106ad84aedb186c16ab339752c86c58dd0fc4669f3dc6c340c2ea2040571787332968a0535502c2a146d05d928285aa77ad957946b6f25426c16d26ec8f118c4f961e14c29811487a3655cf37ddaad223200af38c9e62d46e9d9b9923a95f9d39bc45e00740293ad645977a68192ac90b61ed0917c91deb872b967254ef0e42e8fa3ce8ad3855cb146a66acbd34bbff35192bd8628017a587c51ff98030acd89e9a3f7e06af6831f3d6f4b48dc5d4ceefc802b01c497e13b726146fa5f1d64277b636be859d3aa835a54f34b0a036de266c99811ec9c0fbff62882a4d8308c3166d068871b49e2fa375e40bee3656bb3c79212503348253d93dd0d6b7e303769b80e74cffd1484d009f3bc24cf5b5a87b6421dc217e0d2f459c2c41d0a184f090c4437da12c4d23ee78d6502b02e51187fe1fa325b600a27383cb39f2c8828b171cb9d04e523331c9d0dc34f01cc6632c93f06eb776e78dc45fcb35d2290156a25c5a887edb5531ba0fad77f2152e915f84c3a860f25f70592c391a04ab550c77dc7305208abbb7ea63c92b4a5174d0aef0736124100363e68b5493b7827b239407af7a6dc862554452909e425fde159ec9a7bf301f79f64a8d23a9caf5822c62361212fb932dd57c420d9ccca450e8a4a65dd027574c81dec9cd8d3d1b1522bddb68e8a9aed547dc8c1c521ac7e8c6a9614b5f0cba4a5e11bf5d5758f2bdafd204ea8d2a619ea6184d3271efc6d6a7ee9365f0cecba24e7d3f026453ff2b26db2fe8ea5d653fe5a520372a6ab54620b87847139e47d9b9c91b0182447c2662351eefe172e183ce1e2b3480caac9ec3ffa2cf4f49db739dc846a4466ead9bb76ad9189f4acfe3fd38f7f71efd3f82de6666c2fac5449f96f4a530eecf0a9d61bac82516fe63b500b62a8acc9d8a55cdba0c56b9bc12dee178578ab5ba5bddc466cd0536fa36597e993c5b8b7062549e439efa3b19cf9cd1f3e0ebb448a2fd17d1e4a9afff595a503ce1078bc2f4bf8d8d504029dc197fb50013b4628cdae638e2e08e0b087d2260ec45758bc2f81a4b3be9b4cb69c1535c0dfc859c83c79f8660e9e0520f74ec3d350673eb1c2cc1ad78d4b407d6a97556cd2dbdd862c6084d5e2451eb8e0973d8f3cd74b30589dd519274b006b31d613f472d4a84ae72795c8dbf00b8c73d777c2fae26efb89a3762db5744f316f4345c0bef02ec63ce223a43e6efcf219128743d0309f03c2456171c8bb63a1e57ff289a6439c7c0812f13a3a9e3642712688d0ecaf55cf0b41b245fda6c4acdff05288381637c941f166de974dda40bef43a8b2548c7ad180bf0a58573cbcade1c31dde65712db571b9f6fa9e2679176e0156e0a057deca76335d9c948d0aa15ec9b37c75fc0c371801366a015560b497d06918ca3efeb401aa95295642b31c0ce009ec40d92d0d3d1bae52ea632193cb1797af9e9bc8fc61dc3d5008a81072886a36ca58b03de19e5823e38ae7b09b047ff198dbca897cb2afadf4bcf47843db8a52a1c15bb1ce1bab9b2dfb5d5ab489643dcb647f654b973923bed91e0c72129b893b8c067fe2764a0a67c6e56f54b59b4daa3d60f2b2397611cda9d7be9ac4dfa6b440675cef674a31460475139f5e3ca448d28fa47d06a1e78beabd82ab00cc32a90f4d39d8161751424fbbde2b51cd2454b8022e2933e2150fb9c3267f7f8d0bef569afa286d382ae471f7868b90dffb15d5836f6d37501f5cbd98ebbeb604f6fc118e27e867d8ee26c1ab8b6d575f80de064199978de5bc43c1ba1172927949c1a27ff95a91c611622e8c3de9758b794547cb499061dc5e4d4d267df12f9c0a779b52e36af978ae21fab7a86accd9a617d2e47332a02ce67423b4c4c91ab980054c3d576463eb928e83c7fdf5653b7698174c1da9e966e784e1c6c61c08e6713a5101022ceb1e9a0d9e2c2e815e4fd18faf7823aba424c2df1ccebb18ca0b687a6716c3b8bb87d4351e9466c70e9cd37328f36de6cdb8dca5f70b2930009d84d293563d17f6632fa78ca385bf227dfbe0d0ff06d41079f3a98642d2d35fadd81456a565fc4c6d26fcff88e5b7a8f4ca0ff947d71f7e8554b69aab15dd8bb97a604f9d43f09d4af3c94021c0fe264413c1f16d7fdc048b37c8920c788b727fe3024283d6b9adfacf302066c601b63b2b9e4d1d5079199c1e699eeb391eac9369deb77581bb4957d7fd73c73eebf2867dabcf7a1c5a9d561543af0459063480551c14df1b8b34d697e7c983685c9a84d14a434af2580ff814e8d136e30ad66f28b77144595bc598b9d2e8025a92339f960fd619fd6409286ea2b6af9eb6eb941a2940ec59c204c7074dc7cd69c097bba44345f0927668687b902a97d74152613e94cfdac2889269e6d70352c0b3953e69e852f9a2d5501a2208c59916975bacb888e74fe17c1f1be1b98ef597886ead58167449579f735d3acfd3be23aa974fa80a7756373e69b0cb592cae4b731a30024ceff31b4a9285d6de86c2cdc0cb58ee220e2b4696f356cd87847137c95897d49c0470ac099cc20a88f446e6468ec12a81394846beb2438090602576cafea8a83f6226e2b90c68b494965e85f5f0e9828f3af76283328c7dd7ef3b71b066b45e5c5ead76a871f01958a2dbf6fbd5e44574c93da4841f205b43740e1f59954fb57083bad4bb3723e507f965f3892e3d173162ba83f7ddb84a69595e196b8f92aced0db31ff9eeea3b2b018b97847918c1f1819c55f561faf7fe57288d3d7dc9f955e1ec83abef7aedc79ec96ec8990679baea55268df3ea27c035f31a74e72c3c67010afa85a0e1fafd874a0e6194d728bf2c3801122747935964398631476ac3d1fde43c04f74655c36555de4c119e0296a32d0a11aec12c63810c81f03dc739be2214ff570fe7ff54c95745977731ab2b416a6df977c2be0911d9fd8f3a58d124c81067c54307f91a3b750202837808f8dca6177f03ff32f4b6565dac3903aa74fcb9d3660f6a550fe368c6e43049b6a0df346623a2402039bf68ddac36008393911ab7be203e89f92eae2dccecff2e6ce504761e120e2158ce3750e610ace9e7ac7e14214ef2fcf96db3654dece5aec0cc293f53d086d105af6ae831084b62043c73f564ee76e3c8353b3263aca5816a9a3a474844a94cd5caf85ba1682f164fd3e7b930b6628cdd6fd4aa060902557c545accfe4da82fc2caf10aa61d381b6db0bfae6a7ba2d8bef03c7bd89285fe92abbf6dcf6edd1e58152508738b7a87549046035a2cd0caf1fc97a3dc9cf650200d04911e72f0a08e4a60dfb444cf4720749809e056b19292c8348495dee262487aff4ed1750f6025c987e91d3286c5f8ebf7f0a904dadeb9b6841728052726b99f434fc7bcdcf1d9811b321e7b04e5bb118c3e02e6acc91480a5ae6b6e6182bcdbd8d86902a0ceea1fa5782b74953e9093c7bd8287c7a3b7b7532c41cf933b23df0e0246adcbcaeb34df63cb014b410d6d43d1b043eadf73e1a565bd164ec02b42e0f7148549b958d65495c8b2611504256ff57f6c29b0453bbe828adf8061780956df96e801cbe63c893f3a98b6f063307354bbe989d4314d617584bede299c0905b5106472a130e67d7af8a28cdbdf7e2e6b5d495ba5bc2284eea27a043471a9b6d4f745539100e5160c8b09d85e512b088932006dee28d859c2738b6c8f745876ab3127ea0af7cc4e65cbffa1b3602db7044617cad2c67ba7d3fabc341c6826f5099e6b303d5fc5387555ef3fe648cd9f9a5faebc31bb31c6b2a950273027257e85b5c5a5b6daee7e34e8c33f854bcd429d1c70fcbb0a6022a7fca47d8e1a36aa47c182b9bc590d140066447a0738dcb27511b102dbae53fbc49415b8ec2042d46774f164239edcbe529bbe99e15246f99f17520e42e706032082c7e1cefa099c8d088d8d827e7c8ca49337c8680df71d772d89e5fb3999a1d62c204776bd8c6fc62441bb8f839b35937ed020e36510ff69a386483ad66b19e0279d23f6751ac677af0695316fb57d2557d19153075962e78a59d13101d4901c168e5f55b2acf707d7db302fb819e3ffdfaca6da3f3407e027d300a8fb334727f850fe345f209a8772233523e8eb841b5e744389acae2950356f362239f76915"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000700)={r3}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001440)={r3, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000002540)={'ip6_vti0\x00', &(0x7f00000024c0)={'ip6gre0\x00', 0x0, 0x29, 0xa5, 0x3, 0x4, 0x49, @private0, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x1, 0x1f}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002580)={@private0, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @multicast1}, 0x7, 0x8, 0x9, 0x0, 0x1, 0x4040100, r4}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057b00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x8, "43cfb170d19e5e"}) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) [ 477.328529][ T9818] usb 4-1: new high-speed USB device number 6 using dummy_hcd 13:45:50 executing program 3: r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xea, 0xb7, 0x40, 0x20b7, 0x1540, 0x3233, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xffffffffffffffde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000001e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x3, "986a91"}, 0x0, 0x0, 0x0, 0x0}) 13:45:50 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40), 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x80, 0x4) socket$inet(0xa, 0x6, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xe2) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @local}, 0x1c) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x2}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='ip6tnl0\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x66100, 0x0) 13:45:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x80, 0x4) socket$inet(0xa, 0x6, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xe2) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @local}, 0x1c) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x2}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='ip6tnl0\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x66100, 0x0) 13:45:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/23) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38e8ff00", @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0800370001000000050008000000000009000700b5d8ffb566000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="90575b73d0fae9a6690289fe30f8", @ANYRES32=r3, @ANYBLOB="0c0099000800000065000000"], 0x28}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000640)={'batadv_slave_1\x00', &(0x7f0000000600)=@ethtool_ts_info}) pipe(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x29fa7497d91adf19, 0x0, 0x0, {{0x6b}, {@void, @void}}}, 0x14}}, 0x4044000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x1, 0x29}, @void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000013}, 0x40000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r4, @ANYBLOB="08000a00c64f4ba7c95607000001000000008c6f0199907437aeba9082bc01cb1ed10ec0238b4cab440000522e31daff4a3f29210363f2c8cd3b3a9e0e35b20bff2a6e809bc8b3470ec438295ecdcd324835ad4b33b3fe5ad0e7c0f9ad25f4f718d62fd080cdaafe1f5913c37cb6cefdda066e449828cd309b34b4a1"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) [ 477.818302][ T9818] usb 4-1: unable to read config index 0 descriptor/all [ 477.825317][ T9818] usb 4-1: can't read configurations, error -71 [ 477.836167][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:51 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 478.228508][ T9818] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 478.283910][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:51 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/23) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38e8ff00", @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0800370001000000050008000000000009000700b5d8ffb566000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="90575b73d0fae9a6690289fe30f8", @ANYRES32=r3, @ANYBLOB="0c0099000800000065000000"], 0x28}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000640)={'batadv_slave_1\x00', &(0x7f0000000600)=@ethtool_ts_info}) pipe(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x29fa7497d91adf19, 0x0, 0x0, {{0x6b}, {@void, @void}}}, 0x14}}, 0x4044000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x1, 0x29}, @void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000013}, 0x40000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r4, @ANYBLOB="08000a00c64f4ba7c95607000001000000008c6f0199907437aeba9082bc01cb1ed10ec0238b4cab440000522e31daff4a3f29210363f2c8cd3b3a9e0e35b20bff2a6e809bc8b3470ec438295ecdcd324835ad4b33b3fe5ad0e7c0f9ad25f4f718d62fd080cdaafe1f5913c37cb6cefdda066e449828cd309b34b4a1"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) 13:45:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40), 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 478.601200][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 478.629262][ T9818] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=32.33 [ 478.647606][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:45:51 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 478.723104][ T9818] usb 4-1: config 0 descriptor?? 13:45:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 479.938297][ T9818] usb 4-1: ATUSB: AT86RF231 version 0 [ 480.168177][ T9818] usb 4-1: Firmware: major: 152, minor: 106, hardware type: UNKNOWN (145) [ 480.176768][ T9818] usb 4-1: failed to fetch extended address, random address set [ 480.195947][ T9818] usb 4-1: atusb_probe: initialization failed, error = -524 [ 480.204521][ T9818] atusb: probe of 4-1:0.0 failed with error -524 [ 480.386821][ T3199] usb 4-1: USB disconnect, device number 7 13:45:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/23) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38e8ff00", @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0800370001000000050008000000000009000700b5d8ffb566000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="90575b73d0fae9a6690289fe30f8", @ANYRES32=r3, @ANYBLOB="0c0099000800000065000000"], 0x28}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000640)={'batadv_slave_1\x00', &(0x7f0000000600)=@ethtool_ts_info}) pipe(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x29fa7497d91adf19, 0x0, 0x0, {{0x6b}, {@void, @void}}}, 0x14}}, 0x4044000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x1, 0x29}, @void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000013}, 0x40000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r4, @ANYBLOB="08000a00c64f4ba7c95607000001000000008c6f0199907437aeba9082bc01cb1ed10ec0238b4cab440000522e31daff4a3f29210363f2c8cd3b3a9e0e35b20bff2a6e809bc8b3470ec438295ecdcd324835ad4b33b3fe5ad0e7c0f9ad25f4f718d62fd080cdaafe1f5913c37cb6cefdda066e449828cd309b34b4a1"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) 13:45:54 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:45:54 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r1, 0x6b, 0xfff, 0x8020003) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r5, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c00058005001900020000000500010be0465d19ec8b5ef94d5d03f7d0ee8bb5856868e906855fc51e74fef71f825ab4ba8a496dae1f9f6dcfce392e438d5cc55b690c9bbd6b58faac955ce2bdb14e60534f72d7246eac8527d267e7692be3834c1103a15f8efd33ec558ce09d723bb17d2ae8f5b879f85bf3b3a545326456e9228b01418da69693b29b3e856915787bfef7596bd9067b1228da8f12c151ec1002109742fb8e43f7e0dd2a4a8b667bf64d3a9b7b2c7f0049d962aa0ea8"], 0x74}, 0x1, 0x88a8ffff}, 0x0) connect$can_j1939(r3, &(0x7f0000000040)={0x1d, r5, 0x2, {0x1, 0x1, 0x1}, 0xff}, 0x18) tkill(r0, 0x7) 13:45:54 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x78) 13:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:45:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='hsr0\x00', 0x5) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340), 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0x7, "bab3883d369e522ea4e73e3af2b3f6dfdfb811f271af8e0e9c5dd99f8269a1a93eadac91dcb1ef62c102a172102ba1bef864564b4236de6e62693e348ab9df5223cb48247ad16b82621acdc9e1ed21be44addadb83250094f928b832387238a99d5312c58bdfda90403da2f61e6588cfe6d9359e41a1b41c1a0b3d55166f1693317dff2e96370dd4fafa0be15fe1ecb308dc84c487e9cd8203614e033e29fa2b6895f6deb715a4cbb062d56884927ffbf1c5e83ee8fe5ca1f18a2556c48c1ed48eb64e93536ac68392fdf1082fb64eba854c250830b2ff97f2abb90cf785511cb8fee2c2a4eb565a271792a748617e50d4979cf5b76b43dcfbe265236eb95be9", 0x0, 0x0, 0x7, 0xd9, 0x8, 0x1f, 0x7f, 0x1}, r3}}, 0x128) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) [ 481.175684][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:54 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 481.408649][ T9818] usb 4-1: new high-speed USB device number 8 using dummy_hcd 13:45:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 481.778435][ T9818] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 481.796728][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:45:55 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 481.827285][ T9818] usb 4-1: config 0 descriptor?? 13:45:55 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 13:45:55 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 482.112499][ T9818] kaweth 4-1:0.0: Firmware present in device. 13:45:55 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000240)={0x3, 0xffffffffffff3b2d, 0x2, 0x2, 0x3, [0x0, 0xa2a, 0xfffff001, 0x1]}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) fstatfs(r2, &(0x7f0000000000)=""/113) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7fffffa72a}, 0x0, &(0x7f0000000280)={0x1ff}, &(0x7f0000000200), 0x0) [ 482.318279][ T9818] kaweth 4-1:0.0: Statistics collection: 0 [ 482.325131][ T9818] kaweth 4-1:0.0: Multicast filter limit: 0 [ 482.351428][ T9818] kaweth 4-1:0.0: MTU: 0 13:45:55 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 482.371424][ T9818] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 482.974370][ T9818] kaweth 4-1:0.0: kaweth interface created at eth5 [ 483.175013][ T5] usb 4-1: USB disconnect, device number 8 [ 483.957340][ T9818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 484.318112][ T9818] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 484.327355][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.349329][ T9818] usb 4-1: config 0 descriptor?? 13:45:57 executing program 1: r0 = getpid() r1 = getpid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x41}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES64, @ANYRES32], 0xfffffffffffffd74) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="0f0836660f3a633ea466bad004ec9a13000000fb00f00fb18500000000670f01cb660f388054fe04cf66ba410066ed", 0x2f}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x280000, 0x0) ppoll(&(0x7f00000001c0)=[{}, {r5}, {r6}], 0x3, &(0x7f0000000100), &(0x7f0000000180), 0x8) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000800)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000140)=0x5000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:45:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpgrp(0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x6e) setpriority(0x0, r1, 0x10ffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000501000000000000000000000000000009000300737900000900010072797a3000002000000000000000000000000000c8670000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x400c004) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @empty}, 0xfffffffffffffc21) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x7fffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="5553070300897094e71b0ffbed8b9fb36fe2125c23d6c8fe9fb1f147a869c5dabcda97014d25d86800278dcff47d01009d70dd32378f8b9953d6b2046c5c8281d4671636460203e24558490f39aafacaa693f5812c66538d750f", 0x5a}], 0x10000000000000bb, 0x0) ptrace$setopts(0x4206, r0, 0x200000, 0x20) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 13:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:57 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:45:57 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 484.574300][ T9818] kaweth 4-1:0.0: Firmware present in device. [ 484.627719][ T9818] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 484.683698][ T9818] kaweth: probe of 4-1:0.0 failed with error -5 [ 484.722438][ T9818] usb 4-1: USB disconnect, device number 9 13:45:58 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x1be, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) dup2(r2, r0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x6, 0x7, 0x2, "3438af591d9e660808c9b0b96a36b8ed96d9c1a49f559edd1dad1d1e9798cdff", 0x4f565559}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000002, 0x3, 0xd5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000701239846f3d72468264fe95fd618067235e8497d4ff25a61d67c99e950165c61c92e8581621d67d8577a0125da2b2055510aaeddc5eca1bed4405fa2d92c2346a01fc976b3dec17afedd52963b892f5b80f6188b8fa21127bd2f5657916e49457a24ad4d3708c969ecfd5da44197bdc4d70bc9be66b2fc2bf010dfd23cb39c62c66c4e8ece2e0f8126a6ad0300000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf250e000000c4000280bf000400b1089d7c985d2f0b150f256c75511067644533046f1b2b5c8714ec282f4c1342a20eb058466d51236a0ab06dd275a451ea5f83b9e29a0cc5d331e6f801c9376baeb41aa45a37b52b0d0d1478fbb24dc2412196d3c320e38bac0bac9fc72a2393b05cc2def8216cf6f21b8609b1b7cd619fea07961586b38a8fe602c0fb1855e0cd801644869ba1b983d2c25e1c8492dbee1b8db569e4776ec914cf3313f718adc3a1251e34362eec5aa9bd4b22898b528e8329eba9b1b687b95b7c00"], 0xd8}}, 0x4000000) r5 = dup3(r0, r2, 0x80000) getsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 485.208225][ T9818] usb 4-1: new high-speed USB device number 10 using dummy_hcd 13:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280)='wireguard\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000940)=[0x7fffffff, 0x6, 0xa6, 0x1c66, 0x7ff, 0x7, 0x80000001, 0xffffd668, 0x3415fbc8, 0x8ee0, 0x9, 0x3, 0x5, 0xfffffffa, 0x3, 0x1f, 0x4, 0x2, 0x8001, 0xdd2879b0, 0x4f48, 0x8, 0x400, 0x6, 0x6, 0x4, 0x800, 0x1f, 0xffffffff, 0x401, 0x8, 0xf38, 0x2, 0x3, 0x8000, 0xffffffff, 0x1ff, 0x40, 0x3, 0x9, 0xfff, 0x7, 0x4, 0x9, 0x18, 0x881a, 0x4, 0x325, 0x5, 0x1f, 0x315d, 0x1f, 0xfffffff9, 0x7ff, 0x1, 0x81, 0x1, 0x2a, 0x80000000, 0x6, 0x5, 0x9, 0x3, 0x0, 0xf2, 0x9, 0x3, 0x7f, 0x0, 0xe56, 0xffff, 0xb18, 0x80, 0x5, 0x4, 0x9, 0x0, 0x6, 0x2, 0x4, 0x140, 0x64, 0x2, 0x1ab3, 0x2a3, 0xc0, 0x8000, 0x4, 0xc051, 0x2, 0x4, 0x5, 0x5, 0xf0bf, 0x5, 0x7ff, 0x7, 0x3, 0x400, 0x1, 0x7fffffff, 0x5, 0x9, 0x3, 0x9, 0x1000, 0x2, 0x81, 0x6, 0xbf72, 0x0, 0xc4, 0x401, 0x4, 0x7fffffff, 0xae, 0x3, 0x5, 0x200, 0xfff, 0x10001, 0x5, 0x416e, 0x1, 0x10000, 0x2, 0x8000, 0x8, 0x4, 0x1, 0x8, 0x81, 0xffffffff, 0x2, 0x2b7, 0x2, 0xb2, 0xbd1a, 0x1, 0x9, 0x8, 0x2, 0x5, 0x2, 0x7, 0xaac, 0x0, 0x5, 0x15, 0x8a6b, 0x200, 0x10001, 0x2, 0x0, 0x0, 0x4, 0x0, 0x5, 0x101, 0x2, 0x40, 0x3, 0xffffffc1, 0x1, 0x9, 0x6, 0x3, 0x3, 0x6, 0x7, 0x2cca, 0x3ff, 0x7, 0x1, 0x916, 0x9, 0x2, 0x0, 0x7, 0xfbe, 0x3, 0x7, 0x10000, 0x6, 0x5, 0x100, 0x98, 0x5, 0x4, 0x6, 0x87f, 0x7, 0x40, 0x97b, 0x200, 0x1, 0x0, 0x3ff, 0x6, 0x62d, 0x1ff, 0xff, 0x401, 0x5c85, 0x7, 0x2, 0x3, 0x3, 0x200, 0x8, 0x1, 0x3, 0x475a, 0x46e, 0x8000, 0x9, 0xfffffffa, 0x4, 0x80, 0xaf43, 0x6, 0x1, 0x3ff, 0x1ff, 0x9, 0x400, 0x400, 0x1, 0x9, 0x3, 0x80000001, 0x0, 0x7fff, 0x2, 0x8000, 0x1, 0xe376, 0x3ff, 0x8001, 0x8001, 0xfffff801, 0x1, 0x2, 0x80000000, 0x9, 0x7, 0x4, 0xffffffff, 0x0, 0xfffffffe, 0x5, 0xfffffffe, 0x5, 0xbb, 0x6, 0x3f, 0x9, 0xfffffffe, 0x4, 0xe434, 0x9, 0x7, 0xc6, 0x0, 0x792b, 0x3, 0x80000001, 0xffffff5a, 0x6083, 0x2, 0x1ff, 0x3f, 0x8000, 0x76200000, 0xe116, 0x4, 0x3ff, 0x20, 0x100, 0x10001, 0x6, 0x400, 0xfffffff7, 0xfffffc00, 0x389, 0x8, 0xfad, 0x800, 0x200, 0x8, 0x6296, 0x2, 0x100, 0xffffffff, 0x3, 0x1, 0x80, 0x1f, 0x3f, 0x0, 0x8, 0x4, 0x7f, 0x7, 0x0, 0x9, 0x1, 0x4, 0x0, 0x7fffffff, 0xfff, 0x7fff, 0x0, 0xea, 0x4, 0x7, 0x9, 0x7ff, 0x3, 0x1, 0xfffffe01, 0x80000001, 0x6, 0x7f, 0xb2e5, 0xffffffff, 0x8, 0x81, 0x8, 0x24c, 0x3, 0x80000000, 0x2, 0x6, 0xfffffff7, 0x8000, 0x7fffffff, 0x20, 0x8, 0x7, 0x5, 0x9, 0x6, 0x4, 0x401, 0x9, 0x4, 0x7f, 0x0, 0x8, 0x4, 0x7, 0x403, 0x7f, 0x9, 0x9, 0x2, 0xffff, 0x0, 0xbc7, 0x4, 0x7, 0x3, 0xc4b, 0xffffffff, 0x5, 0x9, 0x100, 0x9, 0x33f, 0x0, 0x50a43ac8, 0x4, 0x1000, 0x401, 0x9, 0x8000, 0x585a6aef, 0xffff, 0x0, 0x8, 0x9, 0x1, 0xfff, 0xb02, 0x0, 0x8c7, 0x6, 0x61f, 0x0, 0xfffffc01, 0x9, 0x9, 0xfffffffc, 0x5, 0x6, 0x10001, 0x1, 0x10001, 0x1, 0x609ecf37, 0x81, 0xfff, 0x6d, 0x3, 0xc8, 0x3, 0x9, 0xb553, 0x7, 0x7fff, 0x5, 0x2, 0x80, 0x7, 0xc9a, 0x3, 0x1, 0x7f, 0x0, 0x1ff, 0xffff42a6, 0x89, 0x10000000, 0x4, 0x38fc, 0x82, 0xa5e, 0x6, 0xa02, 0x0, 0x40, 0x1, 0x4, 0x10001, 0x7e, 0x0, 0x9c, 0x3, 0x1, 0x6, 0xccd5, 0x5, 0xff, 0x7, 0x5, 0x748, 0xff, 0xffff, 0x6, 0xffffffff, 0x7, 0x400, 0x9, 0x2, 0x4b10000, 0x7fff, 0xe318, 0x7ff, 0x1, 0xffffffff, 0xfffffffd, 0x8000, 0x2, 0xf348, 0x63fa5d8, 0x1f, 0xc0de, 0x4, 0x0, 0x9, 0x3ff, 0xa70e, 0xffffd445, 0x1f, 0x7ff, 0x10000, 0xffff, 0x5d2, 0x80000000, 0x8, 0x3b78, 0x9, 0x0, 0x800, 0x1, 0xffff1395, 0x8001, 0x58573491, 0xf3d4, 0x1, 0x5, 0xf11, 0x400, 0x10000, 0x3, 0xff, 0x2, 0x8, 0x1, 0x7, 0x2, 0x3, 0x7, 0x7, 0x5, 0x80000000, 0x1b, 0x2, 0xffff, 0x4, 0xc0f, 0x0, 0x0, 0x4, 0xfffff714, 0x5369, 0x3, 0x6, 0xfffffff7, 0x0, 0x1, 0x80000001, 0x3ff, 0x8, 0x100, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x2c32a653, 0x6, 0x81, 0x4, 0x7fffffff, 0x80, 0x10000, 0x4, 0xe84, 0x8, 0x4, 0x5, 0x5dea, 0x4, 0x5, 0x9, 0x5f, 0x200, 0x0, 0x5, 0x2, 0x800, 0x8, 0x9, 0x4, 0x80000000, 0x4, 0x85b, 0x20, 0x80000000, 0xfffffffc, 0xffffffff, 0x7f, 0x6, 0x9, 0x3f, 0x80, 0x3, 0xfffeffff, 0x8001, 0x4, 0x2, 0x6, 0xfffffff9, 0xff, 0x200, 0x2, 0x1f, 0x8, 0x7, 0x6, 0x9, 0x0, 0x3, 0x8001, 0x8001, 0xfff, 0x8, 0x2, 0x7, 0x5, 0x4, 0x6, 0x9, 0x8000, 0x29a6eb20, 0xffff, 0x100, 0x0, 0x9, 0x4, 0x0, 0x3, 0x80000001, 0xec7, 0x2, 0x5, 0x7fff, 0x2269d447, 0x6, 0x4, 0x0, 0x1, 0x3, 0x6f759c6c, 0x8, 0x7fff, 0x2, 0x9, 0x3, 0x1f, 0x9, 0x0, 0x9, 0x101, 0x2, 0x8, 0x7, 0x2, 0x9, 0xfffff88a, 0x8, 0x4, 0x1, 0x1, 0x9, 0x8, 0x5, 0x100, 0x3, 0x5, 0x30409327, 0x5, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x3b36b44f, 0x7f, 0x60000, 0xcda, 0x1ff, 0x6, 0x152, 0xfffff801, 0x1aa0, 0x5, 0x3, 0xffffff2f, 0x0, 0x8, 0x975, 0x8e80, 0xfffffffa, 0x40, 0x0, 0x81, 0x9, 0x5, 0xfffffff8, 0xfffffe01, 0xffffffff, 0x7fffffff, 0x4, 0xd99f, 0x7, 0x4, 0x23b, 0x5, 0x0, 0x3, 0x200, 0x7ff, 0x0, 0x6, 0x3ff, 0xffffffe1, 0x9, 0x3ff, 0x3, 0x9, 0x5, 0x40, 0xea, 0x2a, 0x1, 0x800, 0x7fff, 0x258, 0x1, 0x81, 0x6, 0x200, 0x6, 0x5, 0x4, 0xd8, 0x2b6c, 0x2000000, 0x7ff, 0x80000001, 0xc0, 0x7, 0x7, 0x1f, 0xa0, 0x0, 0x6, 0x8d, 0x0, 0xffffffff, 0x1, 0x100, 0x7, 0x8, 0x2, 0x401, 0x1, 0x6, 0x8, 0x1, 0x5, 0x4, 0x6, 0x4, 0x7fff, 0x7, 0x2, 0x1, 0x40, 0x1e4, 0x5, 0x767, 0x0, 0x0, 0xfff, 0x9, 0x2, 0x64d828b5, 0x5, 0x80000000, 0x2, 0x2, 0x80000000, 0x0, 0x2, 0x8, 0x52e0, 0x8001, 0x2, 0x5, 0x1ff, 0x400, 0x0, 0x2d6b, 0x7, 0x2b, 0x8000, 0x1, 0x0, 0x4, 0x5, 0x4000000, 0x3, 0x2, 0x5, 0x9, 0x7, 0x81, 0x2, 0x40, 0x1e, 0x0, 0x5, 0x5, 0x5, 0x0, 0xffffff80, 0xfff, 0x0, 0x7, 0x2, 0x48d5, 0x0, 0x8000, 0xa69, 0x3ff, 0x81, 0x5, 0x0, 0x9301, 0x1, 0x9, 0x6, 0x400, 0x81, 0xffffff7f, 0x3, 0xaff, 0xfffffff7, 0x1, 0x6, 0x1f, 0x4, 0x5, 0x2, 0x80, 0x4, 0x4, 0x10001, 0x9, 0x6, 0x40, 0x401, 0x1000, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x0, 0x3, 0x10001, 0x20, 0x81, 0x9, 0x101, 0x5, 0xfffffffa, 0x6, 0x2, 0x5, 0x7, 0x3, 0x7, 0xe5b8, 0x80000001, 0xff, 0xcd3, 0x0, 0x5, 0x2, 0x9, 0xfffffff9, 0x80000001, 0x1, 0x7, 0x0, 0x8, 0x10000, 0x1, 0x685, 0x0, 0x1, 0xff, 0x9, 0x3, 0x8, 0x2, 0x498, 0x7a38b2f2, 0x7, 0x2, 0x6, 0x0, 0x3, 0x5, 0x7f, 0x4, 0x4c, 0x33, 0x7, 0x3, 0x4, 0x6, 0x8, 0x1, 0x8, 0x2, 0x3, 0x41, 0x1f, 0x5, 0xd04a88a, 0x1f, 0x81, 0x23, 0x5, 0x3, 0x8, 0x7, 0x9, 0x8, 0x200, 0x3, 0x1, 0x3ff, 0x3f, 0x401, 0x10000, 0x4, 0x40, 0x9, 0x2, 0x1ff, 0x10001, 0x9, 0xd576, 0x6, 0x7, 0xfffffe00, 0x1, 0x3, 0xd806, 0x7, 0x20, 0x66, 0x1, 0x3, 0x4, 0x8, 0x342c5bb8, 0x8, 0x9, 0x0, 0x0, 0xff, 0x1, 0x9, 0xa98, 0x1000000, 0x5e, 0xffffffff, 0xfd, 0x7, 0x8, 0x1, 0xb5c5, 0x3b, 0xc9, 0x3ff, 0x5, 0x9, 0x57, 0xbc4, 0x5, 0x401, 0x58, 0xa9e959f, 0x7, 0x80000000, 0x9, 0x20000, 0xf1, 0x5890d7b8, 0x9, 0x4, 0x5, 0x3, 0x9, 0x7, 0x2, 0x9, 0x100, 0x8, 0x6, 0x80000000, 0x400, 0x1, 0x1ff, 0x8001, 0x6, 0x400, 0x7, 0x9, 0x8, 0x8, 0x0, 0x7c000, 0x2, 0xc8, 0x4, 0x7fff, 0x3, 0x100, 0x9, 0x6, 0xffff8000, 0xa6d, 0x9, 0x6, 0xffffffff, 0x2, 0x1000, 0x8, 0x81, 0xffffffc2, 0x3, 0x6, 0x400, 0x7, 0x200, 0x10000, 0xffff8001, 0x6, 0x7f, 0x7, 0x7ff, 0x8605, 0x553, 0x80, 0xc18], 0x5, 0x400, 0x7, 0x40}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x44}}, 0x20008000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x88, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4b}]}]}]}, 0x88}}, 0x0) 13:45:58 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r6, 0x0, r5, 0x0, 0x8ec3, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) [ 485.587247][ T9818] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 485.612572][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.659722][ T9818] usb 4-1: config 0 descriptor?? [ 486.068955][ T9818] kaweth 4-1:0.0: Firmware present in device. [ 486.247041][ T9818] kaweth 4-1:0.0: Statistics collection: 0 [ 486.252986][ T9818] kaweth 4-1:0.0: Multicast filter limit: 0 [ 486.296944][ T9818] kaweth 4-1:0.0: MTU: 0 [ 486.301240][ T9818] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 13:45:59 executing program 1: r0 = getpid() r1 = getpid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x41}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES64, @ANYRES32], 0xfffffffffffffd74) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="0f0836660f3a633ea466bad004ec9a13000000fb00f00fb18500000000670f01cb660f388054fe04cf66ba410066ed", 0x2f}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x280000, 0x0) ppoll(&(0x7f00000001c0)=[{}, {r5}, {r6}], 0x3, &(0x7f0000000100), &(0x7f0000000180), 0x8) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000800)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000140)=0x5000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:45:59 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:45:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) close(r0) open(&(0x7f0000000080)='./bus\x00', 0x145142, 0x0) r2 = fsopen(&(0x7f0000000100)='befs\x00', 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0x0, 0x38, [], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200000}]) [ 486.701885][ T34] audit: type=1800 audit(1608299159.899:57): pid=14249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15773 res=0 errno=0 [ 486.771314][ T34] audit: type=1800 audit(1608299159.949:58): pid=14249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15775 res=0 errno=0 [ 486.942449][ T9818] kaweth 4-1:0.0: kaweth interface created at eth5 [ 487.206132][ T9823] usb 4-1: USB disconnect, device number 10 [ 487.429559][T14268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 13:46:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:01 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="5b7d7215047b64231ba64bfd2bf5f0bd2209fdbe3b49730de0b31830fdf8c06a1da7e3040d8341ace128d485fbfd58fad13a2f"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) 13:46:01 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x74000000, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) r5 = pidfd_getfd(r2, r1, 0x0) ioctl$KVM_NMI(r5, 0xae9a) 13:46:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 487.885873][T14299] libceph: resolve '}r{d#¦Ký+õð½" ý¾;Isà³0ýøÀj§ãƒA¬á(Ô…ûýXúÑ' (ret=-3): failed [ 487.920934][T14308] libceph: resolve '}r{d#¦Ký+õð½" ý¾;Isà³0ýøÀj§ãƒA¬á(Ô…ûýXúÑ' (ret=-3): failed [ 487.933919][T14299] libceph: Failed to parse monitor IPs: -3 13:46:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000200)) socket$nl_generic(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ipvs(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}, 0xf7ffff7f}], 0xc6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2}}) [ 487.973924][T14308] libceph: Failed to parse monitor IPs: -3 [ 488.023018][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:01 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 488.098435][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 488.176900][ T3199] usb 4-1: new high-speed USB device number 11 using dummy_hcd 13:46:01 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="db7d008c995fa5c4000012000000087ab200", @ANYRES32=r4, @ANYBLOB="0a00060008021100000000000800a4a11981a5d8"], 0x30}}, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/232, 0xe8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) [ 488.547960][ T3199] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 488.563414][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 488.583338][ T3199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.644201][ T3199] usb 4-1: config 0 descriptor?? [ 488.983265][ T3199] kaweth 4-1:0.0: Firmware present in device. 13:46:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000200)) socket$nl_generic(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ipvs(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}, 0xf7ffff7f}], 0xc6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2}}) 13:46:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:02 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1ff, 0xffffffffffffffff, 0x7ff}) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000340)={0x8, "aa2dd3fe385a00a2470077e11c72a8e6062f989c03c947746aee00f9f5887e36", 0x4, 0x401, 0x1000, 0x4, 0x2}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x5, 0x3}, @sack_perm, @mss={0x2, 0x9617}, @timestamp, @timestamp], 0x9) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r5, 0x0, r4, 0x0, 0x8ec3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4001}, 0x40000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000280)={0xc, {0xfbf, 0x0, 0x8, 0x5}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r7 = dup3(r3, r2, 0x80000) write$FUSE_NOTIFY_DELETE(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="290000000600000000000000000000e300000000000000000500000000000000000000000027c75a5d8e540f189d8f5454e0c777f6442b6be28db0dd994e42ed216bfe71156ab5ad3162dda72f0c7fe2a939ee369b2bc44ba305581e1398632ee178996c5bbf593b07b5d36125ecbd16da43db3c7fdfb4a8a051fabf00c5dff6383229b231626ce6104039e259636cce59097a9dd2f905abdb4f3519aaef1b312e645fee09b89aa6d75a77405d0b75d9e7e4a3d3b10854b069502209cce8dddfe7a36e5df096d6ace654b87740688f23f700aa723bb43b396a1960e850f853000000000000"], 0x29) clone3(&(0x7f0000001680)={0x200600, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 489.196656][ T3199] kaweth 4-1:0.0: Statistics collection: 0 [ 489.205465][ T3199] kaweth 4-1:0.0: Multicast filter limit: 0 [ 489.234805][ T3199] kaweth 4-1:0.0: MTU: 0 [ 489.248886][ T3199] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 489.882353][ T3199] kaweth 4-1:0.0: kaweth interface created at eth5 [ 490.125801][ T5] usb 4-1: USB disconnect, device number 11 13:46:03 executing program 0: mkdir(&(0x7f0000000000)='./control\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x148, 0x14, 0x200, 0x70bd2b, 0x25dfdbfe, {0x8, 0xdc}, [@INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "817fe56ada62a6903c911f81f69a9a0008116ec8f7c6da2535947d3810e79f9283e8134de7079cf60770615c23f0c022441ee2d0932bccca95f97fbce4d5d73c4755c98d0560e4936fde47960b4df423ed5660d37373a01fafad532f4bca026767b540341cbad2b35c9da0bedc61058e700b028ccac29fb0a40fbe7a17452e7ee9453e530a902a57e067e982420311df9ec8095c58bb70a2f5c8194dbe8541ba35d7"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "1f1818edc30b7575e6a5566221ba4d05cb8f49e13965"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ea4a2f7af25ec130f50e06acb4bc3dc3cae17be9ec792a209c867008e71c354c04badb71f65ea1845cc096a697572b7b596de17b121d8b8e92c4d680612429b10a2a3d99e73834158bbcc1d2ccea09bccf38eff55f13c50c516175babfb6c2e9c2cb21abbf"}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80840, 0x0) r2 = open(&(0x7f00000000c0)='./control/file0\x00', 0x86040, 0x50) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r2, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 13:46:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000200)) socket$nl_generic(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ipvs(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}, 0xf7ffff7f}], 0xc6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2}}) 13:46:03 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) creat(0x0, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x1, 0x0, 0x0, @time={0x9}, {}, {0x2}, @connect={{0x9e}}}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000400)={0xaa91, 0x80, 0x7fff, 0xffff, 0x2, [0x1966, 0x400, 0x0, 0x2], [0x20000000, 0x0, 0x6, 0x3], [0x3, 0x20, 0x7, 0x9], [0x3, 0x10001, 0x3, 0x9ad9]}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="68dcaebf7304aafa5d1e23ccd0d42751fb4d23e300c6dce8508df30b4ede3aa7211894d482ab70e8c461e4ecc01400f84fdece3d06d747dcd54b5d4eecbd39ea15587cf7585dd0c1ebdf57a9a35205e9611fcdd6d9548416cf180e9f780905a2dc6fcb91dbf075e85e4b210bcb6fe135613971e2465286dd", 0x78}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40804) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"/636], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000003600), 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) creat(&(0x7f0000000040)='./bus\x00', 0x0) 13:46:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000, 0x2, 0x8, 0x0, 0x800020, 0xffff}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x40000900) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58001ac9", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf250b00000008000100706369001100f9ff2f3030303a30303afcffffff0000000008000b80b70b00000800010270636900110002fad387cdbc3a30303a31302e300000000008000b005837c468"], 0x5c}}, 0x0) 13:46:04 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 491.146223][ T5] usb 4-1: new high-speed USB device number 12 using dummy_hcd 13:46:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480), 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:04 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 491.537374][ T5] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 491.561438][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.651088][ T5] usb 4-1: config 0 descriptor?? 13:46:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000200)) socket$nl_generic(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ipvs(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}, 0xf7ffff7f}], 0xc6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2}}) 13:46:05 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 492.047001][ T5] kaweth 4-1:0.0: Firmware present in device. 13:46:05 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 492.236724][ T5] kaweth 4-1:0.0: Statistics collection: 0 [ 492.242709][ T5] kaweth 4-1:0.0: Multicast filter limit: 0 [ 492.304928][ T5] kaweth 4-1:0.0: MTU: 0 [ 492.326960][ T5] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 13:46:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480), 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:05 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000200)) socket$nl_generic(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ipvs(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}, 0xf7ffff7f}], 0xc6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2}}) [ 492.954215][ T5] kaweth 4-1:0.0: kaweth interface created at eth5 [ 493.247584][ T5] usb 4-1: USB disconnect, device number 12 13:46:06 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000ee0c00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13:46:07 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000240)=0x4) pipe2(0x0, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) fcntl$setsig(r2, 0xa, 0x1b) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x2021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0xfffffff9, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="00080000000000000400000000000000010000000000000c020000000020000008000000000000008d07000000000000000000005f7d2239f937174267b30700244271000000000004000019000000100000000000000100000000000001000080000000006db000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000007394f299439b4c5a0017e6845708c583d5316b17dc59f5e0faa52982ed0900000000000000039d4ce2b8a6a4e891af2e2125cdfc3e41ac55133a4fd770734b27397b3638b866479d54509f2e00"/243]) 13:46:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480), 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:07 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:07 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) 13:46:07 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 494.246547][ T5] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 494.332884][T14475] IPVS: ftp: loaded support on port[0] = 21 13:46:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x138, 0xffffff80, 0x178, 0x0, 0xc7, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'veth1_to_bridge\x00'}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'amanda\x00'}}, @common=@hl={{0x28, 'hl\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x24080, 0x0) renameat2(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r1, 0x0, 0x8ec3, 0x0) write$snddsp(r1, &(0x7f0000000000)="b7bf6fab25", 0x5) [ 494.646443][ T5] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 494.676747][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:46:07 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x5ba682, 0xaeb2fdd41834dde0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x9, 0x0, 0x0, @time={0x2, 0xbd3}, {}, {0x0, 0x80}, @raw32={[0x0, 0x0, 0x2]}}], 0x1c) [ 494.751637][ T5] usb 4-1: config 0 descriptor?? [ 495.040635][ T5] kaweth 4-1:0.0: Firmware present in device. 13:46:08 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:08 executing program 5: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x17}, 0x0, 0x0, 0x0, 0x0, 0xeb1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x9850}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x3, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @multicast1}, &(0x7f0000000480)=0xc) r2 = socket(0x18, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54030000001000010400210a2769609cbd3f1b00000004000000d17969a7d33e3fc4a114dce2fd4046cbf1947f0bda1405e39f4d2c5090529f12d51f0e9fca4e0c6b84ab4886afaf5701704349ec6f40ca97ef8163fc8bebcca244b05d797b98e2321df8cf612687f4fbebfda7a813579f65d0176f9c598740fe9206148e8c03b50acb6fa41e35d3faa02793c00cc24af08d7390613129032f45e750cc885ea7", @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b00010067656e657665000014000280060005000000000005000a000100000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x0) [ 495.236666][ T5] kaweth 4-1:0.0: Statistics collection: 0 [ 495.242524][ T5] kaweth 4-1:0.0: Multicast filter limit: 0 [ 495.273129][ T5] kaweth 4-1:0.0: MTU: 0 [ 495.285735][ T5] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 495.746033][T13529] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 495.898366][ T5] kaweth 4-1:0.0: Error setting receive filter [ 495.904810][ T5] kaweth: probe of 4-1:0.0 failed with error -5 [ 495.949824][ T5] usb 4-1: USB disconnect, device number 13 [ 495.994893][T14543] IPVS: ftp: loaded support on port[0] = 21 [ 496.256239][T13529] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.464545][T13529] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.474045][T13529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.492789][T13529] usb 2-1: Product: syz [ 496.497930][T13529] usb 2-1: Manufacturer: syz [ 496.502590][T13529] usb 2-1: SerialNumber: syz [ 498.085352][T13529] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 498.091978][T13529] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 498.113978][T13529] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 498.309967][T13529] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 498.348586][T13529] usb 2-1: USB disconnect, device number 5 [ 498.363853][T13529] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 499.085299][ T3199] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 499.445145][ T3199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.615195][ T3199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.624269][ T3199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.633389][ T3199] usb 2-1: Product: syz [ 499.638106][ T3199] usb 2-1: Manufacturer: syz [ 499.642698][ T3199] usb 2-1: SerialNumber: syz 13:46:12 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) 13:46:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xa) getsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100), &(0x7f0000000140)=0x4) close(r2) r3 = socket(0x10, 0x3, 0x0) bind$isdn(r1, &(0x7f0000000240)={0x22, 0x4, 0x0, 0x3f, 0x1e}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYBLOB="8df1d3e22b84cbbe6cf281eae3b9ab7a7a43fb2e372c3a4e325c11f86051796b0c92a3f92258a00de96efbda32d0e384f95c5227abe9c1f2db2ff2fc1e6c8ba462496a2d00054051c10a0f1cb6b49c43fbbf3342fbf613e4f88b135ddd82810da938f6769cbc71550805e415148bea17d975c61547fc8cce7355b90de5af6e0bc8b389e0fa", @ANYBLOB="244da59185595750af95038a26fff348c14e9a58d5ee039e2bd2df657ceee00ab9070a3f7397dc0a0167e754fdb430a61a4e0cd926d2de6d92e059f6f6eae0166c72b867404cdc3e2962c3345e60ecd7f1c389a032a616046dac2c43693887db53b33beb1152c14b8a128eff4bfea06799ebc781f9b72dcb291109977eceea566c061df8b995892bf4be73342dc716cadfe959ddd0cb7447a64d9738cfe4e2d6752809843254ddf5888f3580ae596eb337788e844802faa5757e48cacddfa9e801b3f8001c5d8dddd7ba167ac3eec65271befaec632a83ce05f281"], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0xfffffffffffffe7e, 0x0}}], 0x0, 0x100, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x0, 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f00000001c0)) 13:46:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000240)=0x4) pipe2(0x0, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) fcntl$setsig(r2, 0xa, 0x1b) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x2021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0xfffffff9, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="00080000000000000400000000000000010000000000000c020000000020000008000000000000008d07000000000000000000005f7d2239f937174267b30700244271000000000004000019000000100000000000000100000000000001000080000000006db000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000007394f299439b4c5a0017e6845708c583d5316b17dc59f5e0faa52982ed0900000000000000039d4ce2b8a6a4e891af2e2125cdfc3e41ac55133a4fd770734b27397b3638b866479d54509f2e00"/243]) 13:46:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) 13:46:13 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000ee0c00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 499.765182][ T3199] cdc_ncm 2-1:1.0: bind() failure [ 499.822527][ T3199] usb 2-1: USB disconnect, device number 6 13:46:13 executing program 5: syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa3, 0x7a, 0xdc, 0x20, 0x22b8, 0xcb2c, 0x5ff5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xfb, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 13:46:13 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) [ 500.155255][T13529] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 500.190359][T14642] IPVS: ftp: loaded support on port[0] = 21 13:46:13 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) [ 500.404834][ T5] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 500.576293][T13529] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 500.614522][T13529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:46:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 500.659373][T13529] usb 4-1: config 0 descriptor?? [ 500.675145][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 500.840977][ T5] usb 6-1: New USB device found, idVendor=22b8, idProduct=cb2c, bcdDevice=5f.f5 13:46:14 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 500.900453][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.992267][ T5] usb 6-1: config 0 descriptor?? [ 501.004313][T13529] kaweth 4-1:0.0: Firmware present in device. [ 501.066227][ T5] qmi_wwan: probe of 6-1:0.0 failed with error -22 [ 501.174701][T13529] kaweth 4-1:0.0: Statistics collection: 0 [ 501.180573][T13529] kaweth 4-1:0.0: Multicast filter limit: 0 [ 501.220371][T13529] kaweth 4-1:0.0: MTU: 0 [ 501.238677][T13529] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 501.287292][ T5] usb 6-1: USB disconnect, device number 10 13:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:14 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 501.825378][T13529] kaweth 4-1:0.0: Error setting receive filter [ 501.837156][T13529] kaweth: probe of 4-1:0.0 failed with error -5 [ 501.862713][T13529] usb 4-1: USB disconnect, device number 14 13:46:15 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 501.874806][ T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd 13:46:15 executing program 4: pipe(&(0x7f00000001c0)) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 502.085213][ T9823] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 502.344986][ T9823] usb 6-1: Using ep0 maxpacket: 32 [ 502.475491][ T9823] usb 6-1: New USB device found, idVendor=22b8, idProduct=cb2c, bcdDevice=5f.f5 [ 502.494538][ T9823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.533356][ T9823] usb 6-1: config 0 descriptor?? [ 502.575770][ T9823] qmi_wwan: probe of 6-1:0.0 failed with error -22 [ 502.635124][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.793536][ T9823] usb 6-1: USB disconnect, device number 11 [ 502.986271][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.001482][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.024379][ T5] usb 2-1: Product: syz [ 503.028571][ T5] usb 2-1: Manufacturer: syz [ 503.044205][ T5] usb 2-1: SerialNumber: syz 13:46:17 executing program 0: perf_event_open(&(0x7f0000000300)={0x2, 0xffffffffffffffc3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x2940, 0x0, 0x41000, 0x0, 0x200000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) write$sndseq(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1ac) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000100)=0x7fff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x801) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20008010) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000200)={0x3, 0xfff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x80000000}}, 0x18) clone(0xe900e57c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440)={0x8, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x1}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x10, 0xf}, 0x18) write$eventfd(r3, &(0x7f0000000180), 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 13:46:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 504.282286][T14788] IPVS: ftp: loaded support on port[0] = 21 [ 504.324424][ T17] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 504.674264][ T5] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 504.680724][ T5] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 504.688396][ T17] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 504.702336][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.703755][ T5] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 504.726451][ T17] usb 4-1: config 0 descriptor?? [ 504.897525][ T5] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 504.922572][ T5] usb 2-1: USB disconnect, device number 7 [ 504.938352][ T5] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 505.006428][ T17] kaweth 4-1:0.0: Firmware present in device. [ 505.210229][ T17] kaweth 4-1:0.0: Statistics collection: 0 [ 505.232707][ T17] kaweth 4-1:0.0: Multicast filter limit: 0 [ 505.251492][ T17] kaweth 4-1:0.0: MTU: 0 [ 505.256259][ T17] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 13:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:18 executing program 4: pipe(&(0x7f00000001c0)) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:18 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:18 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc0505611, &(0x7f0000000280)={0x0, "0d000000a5e325ba1e423917818af1e41ed468d68ba59584be959ee75c17e44e"}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) r4 = creat(&(0x7f0000000800)='./file0\x00', 0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000840)={0x3, 0x7fffffff}) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x8ec3, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4c7) r5 = getpid() clone3(&(0x7f0000000780)={0x1810e4f364503b91, &(0x7f0000000300), &(0x7f0000000580), &(0x7f00000005c0), {0x3}, &(0x7f0000000600)=""/42, 0x2a, &(0x7f0000000640)=""/233, &(0x7f0000000740)=[r5, 0x0, 0x0], 0x3, {r1}}, 0x58) r6 = signalfd(r0, &(0x7f0000000380), 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0xe) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000000440)=""/201, 0xc9}], 0x4, 0x0, 0x20000000) 13:46:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x40, 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) 13:46:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ec3, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f00000004c0)=ANY=[]}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000700)={0x0, 0x0, 0x1, "82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 13:46:19 executing program 4: pipe(&(0x7f00000001c0)) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 505.854156][ T17] kaweth 4-1:0.0: Error setting receive filter [ 505.860510][ T17] kaweth: probe of 4-1:0.0 failed with error -5 [ 505.885127][ T17] usb 4-1: USB disconnect, device number 15 13:46:19 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0, 0x10}, 0x40440c5) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c76", 0x3b}], 0x1}, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xd6, 0xabe8c09420982900}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r3}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x82, &(0x7f0000000280)={r5}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) [ 506.055240][ T3199] usb 1-1: new high-speed USB device number 10 using dummy_hcd 13:46:19 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:19 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 506.414794][ T3199] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.440650][ T3199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 13:46:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 506.484024][ T3199] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.517141][ T3199] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.665404][ T3199] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.682595][ T3199] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.713690][ T3199] usb 1-1: Product: syz [ 506.734388][ T3199] usb 1-1: Manufacturer: syz [ 506.800156][ T3199] cdc_wdm 1-1:1.0: skipping garbage [ 506.807782][ T3199] cdc_wdm 1-1:1.0: skipping garbage 13:46:20 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 506.850086][ T3199] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 506.905076][ T17] usb 4-1: new high-speed USB device number 16 using dummy_hcd 13:46:20 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0, 0x10}, 0x40440c5) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c76", 0x3b}], 0x1}, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xd6, 0xabe8c09420982900}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r3}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x82, &(0x7f0000000280)={r5}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) 13:46:20 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 507.283961][ T17] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 507.313497][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.384619][ T17] usb 4-1: config 0 descriptor?? 13:46:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:20 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x5) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002180)={&(0x7f0000000180)="11b91377a1d645b69e239e01f621860fe5c6dd3be347e7c148a8d53f53c30acf58fb5d8e0ae27dfe8db9f0f5e0c2839bcbc43928482e7fc632ec85b06f4e0e1db7aa590ed4989d149b21893f64d8acd0b397d745fcc15a852d9bd2e2a5c25d3994b6ac88e429b4069501c3b1b5ef8eb4354867cf77afab4443b6c36c7ff66d5aa48c33a3a9963d96d93bfa30271b3b120c23e4378b2817915f4f364313def109af0b1cecac6f7d771af03d0e933b8568f4bc694bdd46ab43eae8eafa981d3cf73266bccb95d7a761bfdc766120f403f23818db9cbdce232d68548c04648bf264ca8074869a425e12245c64fe6fc4f621804d3eec8e53c414dae270621e771d194fd18e2627f6a9de688134f4203e93cf7407dc6c87f28e5ecac47c52d18096ff24665aed2981dc9fac4c603d182f65a609214ded62e2537d9ec49c727f8c275d3317b9ad306e05ee922a248efda8b8264aaac1ccd9fa83ca60299649473547b2a01d469f8d68059ed2580a7cb18c73b94cda9bc1b46e2a389ae6f512d0e47764fadd61ef8d9fe890481bc5761abe6607667687a349c48202cdf5526163276d8befba0bd1b05ec15ff813929e808dfaa67a564686a216d37dfeb689ab5a661416ef474d002da545a3fa00bfe9254d71e861d8ca175ca93deb277a1e92bc9eba61c937a1cf4bccb3863d82d2174e6ba61608b7be8c33ff115f55eabe7ace908615393f4f5a1556bffa1ab672e77076a81349c4aab1eebd6342607e7805565aa80cd458f80f8d3b506159b2770b10f80538a8c182e496ec6db27938fdca69b1e8346b33f6b831cc9319b9f4757881802e9c52db4437cd49986a7e3c6a3b85645ac9e05e2262a21eb022eefe2b8d6acd442d797e592ae6752a4d46a7975d3fbb5cccb5aa69a5a4326db8f28adcd5d5537f42293305aa1d0d661b7dcdcb34c528db1db1bf855b3ce7d81d245734b6390ff82123c6ff07920ae4effacaf63861ddc68f5c27df2baf571c687fc2683e9be91a4a5f5717c5b0d9ea8859bd6c3fe093a71675947b73ad9a3f162621ab45adf8b1c784ae6f2cf8625d12d674c6e5f63f74552124a36afbb1772b4f93f951b653f97bd1a38b2da0c199aae305b10b04ac6dda79058f4089951f231fd7e098fa5a4de124aff4b5deb169b8b6e6b6dc96025cd0b81d471d26f5ff910ede366d8f5fd36981a91f850bf6e16efb295794ef9f9a7d6de1016b2d762800ecb2308b791933ced0bccaa955307c7ae66a51fc0e01cd6994d36c83abc314d69aa7e5af8ca56265ed0398cc87f8af0b7d8ffc5b62fcb1b25ae2e1361823fbf945a15cc8dc7d4f25c8728c5e56bfb13846bba07cec81c2983f69668d6f98a9b6470446a7c5d497136af8e9949ada90b64f74d53822124d1427c147a465996a33a41f3486fd479a0e8dfc38c538309c0d0c79830e6d1b83a0828f801f8bbac1562668134672f1e6efab68aa4681cf2f75e2d83f54b8ca6ae8c31fa4b9d2e66594aaa3efd7587595cfb3431dece9c681469e3d699d37b5bc1718c57f3f819138a73b88fd05473c18648777a97b1c3854547ccd5804fd16740ca9d00335dbcaf1fb256e10c70a98b2e4421792ef2990b8887f64b887e522250726c9cc58e5a592d62d5e7561f51439752a16b8027018758e0e98714e6075d9cd98e4bbca981b116900f2077edc9099048d9f19ae80b08d7a35afdde22d36463083ead52f7d06e19f3771490b4930ae3b1698934d0299e6f05edf61866221a04dbed49d8dc6079282412b4aaa8ca25576482d6b64b2cbb4e7007053f9afd8644bce125874ac104dc1644130bd1e653da6678297122a6fa9bc211ca17424398143168b935a9e9d38ae384b17da3ed314ca40dae45593bd6fbe5117e2cf6a008b0a632fb7cb8629dda76849831795e87d40c587f177a2dfa40e1c016ef445bc913a892be2a52d9363a4e8761f0e58f69246b035fda4f77574d401d679157478722cead2581b8548b4d7605ffdb3e1330349b71b7fab094e5d49bce43b0c6451e4f2927233dff86faa846c450501ae33df5b77b86ac7c0798a0c935886f71e770e06e58f0a4625a8b17a2d663a57fb610517ec4e942a60fa81c80a886e570c169a430f831b3f1017708197438eee2bc5868e5057a0258576130f113e87ada73d55b0592a638387adc4f9895d393077fefe2cbe5a70ae335e49937d05bd1c3ee0fe7c0fcd1007abd326f1c168c36649bc4dec3bff202e342e5487230e833aec8be83c8b877f49eefdf013de869ee016040e18079cf5f0fb2336e921eb57f0321888ffd045a77d316436ca772f48e1e52bab3da3337263755d09467d27cbd7d9c3df556655efd08a5c091f77f0add18b0947266f07be41e2068f5215c9fc34689d4a1c0f365b003d41f698d1bae983487db56c693cee50174cc32752c54902172340892c7aed4692b175af7ba31f918fd15b501e777f34d7de3130dfe5ed1f7921692ce1b9a779d0f3d0ae277fe9636c468cc459c7858b5785a67f190992ef6405921f720b21394096e0130219bd643d4041e34f72d8e3341527faa9663f6667be2e82169489eeb515fd8005c610064ded1c1514a31a13a192c385d023ee2688ea090cc0d88ce635c7b095b26eb90fdc41023169f6ec3114a3e4f18431804eb97b50dd2b6010a20148e59a2a51a875566fbeef826858d1ecdb2057e618a46c1a676fc2c9378e1000ad0b429194010aabee8d1f2f4aaa828efa1b5b375abf17d21613ab5527d3456ac0aef79b98e1911ce5de0fa401aefde0e150129a3fae2f3fdab73e974ce21ce37bf0ab9e71d3a2f9a96af1be291ee5bb07857685f4b9930902fd46237693057d8bb6918fdc99cf527c6b20486064b0c82e3c8d93628b4db550381f378da77dfa020a13c41e0a4022446009d7ddd3e1b3caa3736b8810dbdb4c4726725ab9fd8ce68f5460e3bd3bc86dd51bd1abbeeae836de0808741e1d1de7302c9830e22a2b11135bc85e121aeb0f79596361fd115d48d7c2d33a1b614d31f15b5bcc7a74ded99d6d4ebd61f74cb7a80f389c0f44004adc629fe86de75654eccebc926f03a413cce2c0a97fee296853aac1e965c23e55342f5015ceed95932a18a7ae9398807e0df9e1d63ad61ce12f1b474b17ce69a0a9cfe3f28913a9a5e5af544b7edf6116acc741e220945aea175b7209b05879edc16ed36a48ac65d8ffd046aefaa941c527fd6633c6449c51296d4ee2b8760c0cddcb5b8c11016d9c997a56a360a2f2bec70d477ce5d4ca6bbda25b25debecabe295cd80e21226462cd8c84c523659329791e168b19a0ac379d659ef18e90dbbd166e3a4e03375c319ab6d578248fddb9e50587f2d88a63a9ac8af41ebb3ab0d1912d645a4d761f7e2eeb65859a3ea83d5cd9db909e59a28e1441ce33b0af8906d446d48e24c9b57b3abfa3c18ac45afecbe128b0efbbd472690172d7a5109568989c05aed008d9327413834ed09b89eeeae79d0a25ab2f98c4940f93e0a83c6570922b6224f3516dbe5b7c58ed18174e3bd4218b67df8368956717ad1d6bbb826e92dfe64f3bfbc9ace093001ab005852f5302d474f49bf3f82e1af03188a35d215e57264b985ab0fc7f9421272236ba0378643c1d2ee64cac3d7b04a0418342d0614df6ab24ae82a954ee3e41c239bb6ac7cdabb11accce548cb6a3aadf6c199fff12cf1f23a3aa7dc0dc31f60b1b914fa64bd31e56b3c751e2163a29edbd19467867133f8dda9bc8e3189b9bb63cbae4554b6f9b70bb7f8706c939674e094bb0c862ec6c7aa5e9b4879b87313c95195b342992caec368b970b6a62ab72fa3806d45646cd0da2059f01315501d021a9c361fb17c8bb17528cd77481602de461b1be22b86b72dc21f320618907bf82d9d3be508c5971abfa7cf6f78b9ded63f3b1dbbc8e73bd33703652f986b0c27e87652e3c5fd478a34e746ecaf8c358063ab48069d1c20987c50c9fddae89b107b157033491fd67798acc44caacf091c3e08ae76aed50c7d3ccfc0188f9e402572f0912436e8a060fc5de1c5e9e96baaffb293d31165817f2cb9e9a3ab04ceca493160632d914bc74cc17cba294a80218f85dab325cd58cf34c42a88577dc1cab85278df44ce80af8973d2408f65a66756617bc646d91ffd3880b0ccbec9efa778269c7537c8d19b1434f527829170dfaac8895832dc9271dd0426c848ef1892bdf3d8ec62ed030b64e8f931fed8fb1a2b2d628bb498ee739463ef25d0fbf086b403a8c4fc0120d00f162c154113891c5561fa74d74550fece5b91fb8814ff7eb2ed5d98bac4948309d71a9299f96462a17246adc0c67aeab1862f7bc9a944d47f022528a8e7cf2a24c5a1b32be57c5177744826559844ed538e5489cb7c507e0ffb4ac73d2cdd430683313aea5649f85c6c2e9f892a986d0bca6711d794f9c3fdf4f2c11a50af30aeafab98b6c39f049c6f26d2d7d726f6c714bacedcab6debd1c71c1e8508abcd89f8abdad25b9605e7ce67483a071968da2ec2c634ab89321df2ee56815875ecd2715c2af75cb0b1317817c97729f30c32f042b846f35329f4953d369a2837cef6fb259a6ad7cafa27257a5a106bcabcc7f31a72fbba4cc6c8708229757ba4967c14c072bc45dc8541c089d79bc3ab8f6b578fd48854eceaa208b493918618c9b84f1238264f44a30f1032c2059b9ec4dcf9fa3fe2a70b8f0ee782082a5c87f0038efd7781dc878aef8af440bf6015813956cbba43a7dd99fea36940fbfca2f49512eddd33aa528fb91da713ae690004467bb2d9a5f67e327eaf4fe49cd0b4dd4452b706ae0d155d7f460b8fdd4af92b91789d867141d41a2a1c927fe2ae5ecf939b51559dd5c7abf4803dcaf38185e88d4a112b791281090688e2ae30ea7815c6bbf4bcbfa05688f4b1c60fcc12c7a2a6cc25072fc62709f291db456ab2e14fcdbfba7bf2c724d2bfcf5862f3f2e76c9311837d183c92734c9ff4cf18a10b44309a43a9e8922193284436c9028568dd272cd17f3cabed44bbee45c1906d5ecfb4508f1276093487a32b60e76023f7f5cdef075b273ed20296d7fca5af089703adc63be908ddc136bc716336a118d01c63e2a4ce6382634b9e985fe051d03024a7657c0ccddcb422fbe92830965ceb7150271e75e23319057d16b661e842ec19eb610e4cd31a692fa4c55d10bb17bb665373ce80bfe2e1946f946eb4679c651df1332bc97bfda34b8e6232e808379ba24df8152cd1ee53c7a73f476ae7c0d48c6bce84fb81b31add7525287bc8d94783d03dcdcc41a964548de772d0606b5366525254dbcacedac3791974b31c81a9b854887e872760b30699cbeddd6b9fb071653eec55d8ae328a41b3e83ed63209e5730360784571c43f86169ac82178724b5e7347c8dbfd5d1ebcd3a7ccfb936981bff718d615c933292cd0520b1f97f2eef0f3797222e238f92811221d0179c56f06c84927a355a499a74eaad8b245bf4c31245561044017a50c186feba3fd5fab7c374a0461bab7663ba07cb9c6bf16a3b0625f44b536d61825bfe8bbfd7707b913d590e0f3eea9681726cd876d3317cee550eb505d477dc11f53e52e147d2dae74cced7f61498791fee7b32ed4bb3c20c53bc558c7247e1ce55e52f5c3f7d51af81e983af20fe5998cb519c55c7da69bd687446bd96706d39a9967401b6996e4deffe8d61daed8f4d00b9957516b414d43b5ee0c6cef1ca796c786e16ef1783dcb766a557859b73903245219295e47d09167c010289c0ac8f14c1656dae92b1917738a7", &(0x7f0000000040)=""/48, &(0x7f0000001180)="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", &(0x7f0000000080)="4f9487b15e0d3b46bafcfdca2b78836afb11f917", 0x8, 0xffffffffffffffff, 0x4}, 0x38) sendfile(r1, r2, &(0x7f00000000c0), 0x2000000c) fcntl$addseals(r2, 0x409, 0xb) fremovexattr(r2, &(0x7f0000000140)=@known='system.posix_acl_access\x00') dup3(r0, r2, 0x0) [ 507.695457][ T17] kaweth 4-1:0.0: Firmware present in device. [ 507.893996][ T17] kaweth 4-1:0.0: Statistics collection: 0 [ 507.900274][ T17] kaweth 4-1:0.0: Multicast filter limit: 0 [ 507.941510][ T17] kaweth 4-1:0.0: MTU: 0 [ 507.978322][ T17] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 508.547990][ T17] kaweth 4-1:0.0: Error setting receive filter [ 508.559737][ T17] kaweth: probe of 4-1:0.0 failed with error -5 [ 508.577640][ T17] usb 4-1: USB disconnect, device number 16 13:46:21 executing program 1: syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 13:46:21 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0, 0x10}, 0x40440c5) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c76", 0x3b}], 0x1}, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xd6, 0xabe8c09420982900}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r3}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x82, &(0x7f0000000280)={r5}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) 13:46:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:21 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ec3, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f00000004c0)=ANY=[]}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000700)={0x0, 0x0, 0x1, "82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 508.749219][ T3199] usb 1-1: USB disconnect, device number 10 13:46:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 509.324039][ T3199] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 509.433597][ T9814] usb 4-1: new high-speed USB device number 17 using dummy_hcd 13:46:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r1, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES16=r3, @ANYRES32=r1], 0x74}, 0x1, 0x88a8ffff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000200)=0xe8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r9, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r9, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r9, 0x0, r8, 0x0, 0x8ec3, 0x0) write$usbip_server(r8, &(0x7f00000003c0)=@ret_unlink={{0x4, 0x1, 0x0, 0x1, 0x1000}, {0x3}}, 0x30) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x318, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\xdc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-}\x9b#)*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@\'^i\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!.$\x8c\x9d)[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf29e}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3acb}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xb8-]-.%'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{}.+.][-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&%(-:\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "9e0ff304cd8875472be189cfb900df891c0697f8fcb926982b9bdcb9c252928a0d25e88c7f2854d8161c9b3f560453762b9af36b8beb9dc087d2338af0c95e34ebaf5f0f76c2bc044ea846f5acaaa76adf5d2ca43d3fbeb4c1a123b041aece06b9d177961e96240b92a6a2d88da2cbc8de0a775c5b86743b78f2c6d6c8ab34bcedd145e28ea79d9541f0a7a859bbbcee46f418766f79c3be8bc11236e917498e07570c6460f7bd99be3a342c23f7e2f4093e1b18afb998005c512bb6acbec5dc9e8c49c294b552917981209990d04147d510229226bf773ec782577e72aed6"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x20040894}, 0x20000040) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0xea90, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0xda}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0xfd, [0xf, 0x0]}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3c01}}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x1c, &(0x7f0000001080)={0x0, 0x0, 0x55, "b470bc67fbf5388f08ae560c4d3464983391a1429248c4c7c92ef0e38a0d730ba4c59bd91f90916d619453120be1ae1d43bdb995ab6c3590156e6e8e5cce69a373d4c461bdc8d77bad835fd2ca6d5f02b4aa2f63f5"}, &(0x7f0000001180)={0x0, 0xa, 0x1}, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000002a00)={[{}]}) [ 509.685607][ T3199] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.697139][ T3199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.709821][ T3199] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.722257][ T3199] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.795650][ T9814] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 509.810034][ T9814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:46:23 executing program 1: syz_usb_connect$uac1(0x0, 0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="10010000000000406b1d01014000010203010902720003010000010100000a2401000000020102052404000007240400004f4709040100000102000009040101010102000007240100000000090501090000000000072501000000000904020000010200000904020101019a776afd058209100001000007251572ddbc0002609e6e76f037a13bb4113390e960c5dfb327844d53dae6a80717065155faa964cba9ba5b75e073f52d734c7cb7b31d"], 0x0) clock_gettime(0x0, &(0x7f0000000240)) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x5, {0x40, 0x4c, 0x1, 0x3}}) io_getevents(0x0, 0x80000001, 0x0, &(0x7f0000000140), &(0x7f0000000280)={0x0, 0x3938700}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000004c0)={'raw\x00', 0x124, "143fefa7908a3b7fbd17481baaefd26bb3d1498232c5d0c0a2ae16562cf9932bd6a0bcc77015c2687d6ca0d8c2e990a818e664ecb8b450a50ad92514111f1a038e96cddb30ccbd66b94b3909df13353a0354284f423b97110467dee6469a5a1507e6620740c353159130308ac101a2a870ab22e60bc53561f8808c779841844da92223706245b3487a6272a56208111e571579c221ab1e0b70f0cdfcce3d482c9ed9af9a134e82ff058bfde3bdf938d17fe6859a794de7983287782b3926d3f893f2f18ba9a65c91134e45e3a201560e5ee1a0b07a660be493384745781df138d3397e964ac98e85fe622f7750ce150554a69e77ec174f7b710c40f30f7d95c7337df76ac952b6eaf9b2ffcc4bf2538a2d7a73e262da1532e6acbc206f1db566ee19340e"}, &(0x7f0000000100)=0x148) [ 509.837124][ T9814] usb 4-1: config 0 descriptor?? [ 509.853559][ T3199] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.869462][ T3199] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.891125][ T3199] usb 1-1: Product: syz [ 509.901588][ T3199] usb 1-1: Manufacturer: syz [ 509.964822][ T3199] cdc_wdm 1-1:1.0: skipping garbage [ 509.970068][ T3199] cdc_wdm 1-1:1.0: skipping garbage [ 509.994176][ T3199] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 510.063824][ T17] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 510.114879][ T9814] kaweth 4-1:0.0: Firmware present in device. [ 510.223450][ T53] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 510.313478][ T9814] kaweth 4-1:0.0: Statistics collection: 0 [ 510.319521][ T9814] kaweth 4-1:0.0: Multicast filter limit: 0 [ 510.338419][ T9814] kaweth 4-1:0.0: MTU: 0 [ 510.342748][ T9814] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 13:46:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) [ 510.439831][ T17] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 13:46:23 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 510.596302][ T53] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 510.621535][ T53] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 510.684274][ T17] usb 6-1: string descriptor 0 read error: -22 [ 510.690540][ T17] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 510.723296][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.765796][T14986] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 510.786186][ T17] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 510.833919][ T53] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.843612][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.851743][ T53] usb 2-1: Product: syz [ 510.857535][ T53] usb 2-1: Manufacturer: syz [ 510.862147][ T53] usb 2-1: SerialNumber: syz [ 510.953221][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 510.971631][ T9814] kaweth 4-1:0.0: Error setting receive filter [ 510.978679][ T9814] kaweth: probe of 4-1:0.0 failed with error -5 [ 511.008210][ T9814] usb 4-1: USB disconnect, device number 17 [ 511.008727][ T9823] usb 6-1: USB disconnect, device number 12 [ 511.114434][ T3008] usb 2-1: USB disconnect, device number 8 13:46:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) 13:46:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffffffffffffb8, 0xb, 0x9200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x91) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 511.508752][ T3008] usb 1-1: USB disconnect, device number 11 13:46:24 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 511.843246][ T5] usb 4-1: new high-speed USB device number 18 using dummy_hcd 13:46:25 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 511.983526][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd 13:46:25 executing program 0: socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x800}, {0x8, 0x16}, {0x8, 0x1a}, {0x8, 0xd}, {0x8, 0x200}, {0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x6c}}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1071fa7, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) 13:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) [ 512.244188][ T5] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 512.268084][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:46:25 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 512.307445][ T5] usb 4-1: config 0 descriptor?? [ 512.533643][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 512.550975][ T7] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 13:46:25 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 512.608804][ T5] kaweth 4-1:0.0: Firmware present in device. [ 512.783249][ T5] kaweth 4-1:0.0: Statistics collection: 0 [ 512.789187][ T5] kaweth 4-1:0.0: Multicast filter limit: 0 [ 512.819214][ T5] kaweth 4-1:0.0: MTU: 0 [ 512.831654][ T5] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 512.849903][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.874675][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.882696][ T7] usb 2-1: Product: syz [ 512.894936][ T7] usb 2-1: Manufacturer: syz [ 512.899542][ T7] usb 2-1: SerialNumber: syz 13:46:26 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:26 executing program 2 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:26 executing program 0: socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x800}, {0x8, 0x16}, {0x8, 0x1a}, {0x8, 0xd}, {0x8, 0x200}, {0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x6c}}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1071fa7, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) [ 513.323661][ T7] usb 2-1: can't set config #1, error -71 [ 513.340034][ T7] usb 2-1: USB disconnect, device number 9 [ 513.398512][T15126] FAULT_INJECTION: forcing a failure. [ 513.398512][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 513.433080][ T5] kaweth 4-1:0.0: Error setting receive filter [ 513.439441][ T5] kaweth: probe of 4-1:0.0 failed with error -5 [ 513.493382][T15126] CPU: 0 PID: 15126 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 513.501960][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.512042][T15126] Call Trace: [ 513.515332][T15126] dump_stack+0x107/0x163 [ 513.519708][T15126] should_fail.cold+0x5/0x1f [ 513.524337][T15126] _copy_from_user+0x2c/0x180 [ 513.529059][T15126] __copy_msghdr_from_user+0x91/0x4b0 [ 513.534465][T15126] ? __ia32_sys_shutdown+0x70/0x70 [ 513.539600][T15126] ? lock_chain_count+0x20/0x20 [ 513.544478][T15126] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 513.550501][T15126] ___sys_recvmsg+0xd5/0x200 [ 513.555114][T15126] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 513.560773][T15126] ? __fget_files+0x2c1/0x430 [ 513.565477][T15126] ? lock_downgrade+0x6d0/0x6d0 [ 513.570364][T15126] ? __fget_files+0x2e3/0x430 [ 513.575078][T15126] ? __fget_light+0xea/0x280 [ 513.579693][T15126] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 513.585977][T15126] do_recvmmsg+0x24d/0x6c0 [ 513.590427][T15126] ? ___sys_recvmsg+0x200/0x200 [ 513.595303][T15126] ? lock_downgrade+0x6d0/0x6d0 [ 513.600186][T15126] ? ksys_write+0x12d/0x250 [ 513.604721][T15126] ? __mutex_unlock_slowpath+0xe2/0x610 [ 513.610293][T15126] ? wait_for_completion_io+0x260/0x260 [ 513.615866][T15126] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 513.622128][T15126] ? vfs_write+0x18e/0xa80 [ 513.626564][T15126] __x64_sys_recvmmsg+0x20b/0x260 [ 513.631611][T15126] ? __do_sys_socketcall+0x590/0x590 [ 513.636921][T15126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 513.642879][T15126] do_syscall_64+0x2d/0x70 [ 513.647311][T15126] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.653226][T15126] RIP: 0033:0x45e149 [ 513.657141][T15126] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 513.676767][T15126] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 513.685205][T15126] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 513.693209][T15126] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 513.701209][T15126] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 513.709198][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.717187][T15126] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 513.743166][ T5] usb 4-1: USB disconnect, device number 18 13:46:27 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:27 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:27 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3f, 0xfc, 0x0, 0x0, 0x0, 0x800, 0x30e08, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000002280)}, 0x408a0, 0x0, 0x340, 0x9, 0x3, 0xd44da357}, 0x0, 0xfffffffffffefffc, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x36a6f000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x40) setpriority(0x0, 0x0, 0x10ffff) r5 = getpgrp(0x0) setpriority(0x0, r5, 0x10ffff) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000022c0)={0x14, 0x13, 0x2, {0x40, 0x0, 0x3}}, 0x14) r6 = getpgrp(0x0) setpriority(0x0, r6, 0x10ffff) syz_open_procfs(r6, &(0x7f00000021c0)='net/ip6_flowlabel\x00') ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f00000000c0)={0x4, 0x2}) openat2$dir(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x40000, 0x8, 0xa}, 0x18) 13:46:27 executing program 2 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:27 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x290001, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000680)='security.ima\x00', &(0x7f00000006c0)=@v1={0x2, "e1fd53f008f9bedbe3c5a59194c1cd3f5b"}, 0x12, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454da, 0x400010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)) r2 = syz_open_dev$vim2m(&(0x7f0000000740)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xffffffff, 0x1, 0x0, "3636dd2c0518419e3a1ec5ccc935ea44c36b4e24c5a47d00"}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) readv(r2, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000540)=""/67, 0x43}], 0x7) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x400, 0x0, &(0x7f00000001c0)=[r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x6) [ 514.244225][T15157] FAULT_INJECTION: forcing a failure. [ 514.244225][T15157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.283642][T15157] CPU: 1 PID: 15157 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 514.292191][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.302277][T15157] Call Trace: [ 514.305555][T15157] dump_stack+0x107/0x163 [ 514.309889][T15157] should_fail.cold+0x5/0x1f [ 514.314477][T15157] _copy_from_user+0x2c/0x180 [ 514.319155][T15157] __copy_msghdr_from_user+0x91/0x4b0 [ 514.324522][T15157] ? __ia32_sys_shutdown+0x70/0x70 [ 514.329631][T15157] ? __lock_acquire+0x16c2/0x54b0 [ 514.334662][T15157] ___sys_recvmsg+0xd5/0x200 [ 514.339250][T15157] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 514.344883][T15157] ? find_held_lock+0x2d/0x110 [ 514.349644][T15157] ? __might_fault+0xd3/0x180 [ 514.354321][T15157] ? lock_downgrade+0x6d0/0x6d0 [ 514.359179][T15157] do_recvmmsg+0x24d/0x6c0 [ 514.363597][T15157] ? ___sys_recvmsg+0x200/0x200 [ 514.368439][T15157] ? lock_downgrade+0x6d0/0x6d0 [ 514.373290][T15157] ? ksys_write+0x12d/0x250 [ 514.377797][T15157] ? wait_for_completion_io+0x260/0x260 [ 514.383339][T15157] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 514.389591][T15157] ? vfs_write+0x18e/0xa80 [ 514.394024][T15157] __x64_sys_recvmmsg+0x20b/0x260 [ 514.399081][T15157] ? __do_sys_socketcall+0x590/0x590 [ 514.404368][T15157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 514.410279][T15157] do_syscall_64+0x2d/0x70 [ 514.414692][T15157] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.420599][T15157] RIP: 0033:0x45e149 [ 514.424497][T15157] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 514.444097][T15157] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 514.452509][T15157] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 514.460473][T15157] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 514.468436][T15157] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 514.476396][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.484356][T15157] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 514.572859][ T9814] usb 4-1: new high-speed USB device number 19 using dummy_hcd 13:46:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x290001, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000680)='security.ima\x00', &(0x7f00000006c0)=@v1={0x2, "e1fd53f008f9bedbe3c5a59194c1cd3f5b"}, 0x12, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454da, 0x400010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)) r2 = syz_open_dev$vim2m(&(0x7f0000000740)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xffffffff, 0x1, 0x0, "3636dd2c0518419e3a1ec5ccc935ea44c36b4e24c5a47d00"}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) readv(r2, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000540)=""/67, 0x43}], 0x7) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x400, 0x0, &(0x7f00000001c0)=[r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x6) 13:46:28 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:28 executing program 2 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 514.953632][ T9814] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 514.972092][ T9814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.029693][ T9814] usb 4-1: config 0 descriptor?? [ 515.242855][T15181] FAULT_INJECTION: forcing a failure. [ 515.242855][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.283304][T15181] CPU: 0 PID: 15181 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 515.291766][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.301836][T15181] Call Trace: [ 515.305122][T15181] dump_stack+0x107/0x163 [ 515.309459][T15181] should_fail.cold+0x5/0x1f [ 515.314058][T15181] _copy_from_user+0x2c/0x180 [ 515.318772][T15181] __copy_msghdr_from_user+0x91/0x4b0 [ 515.324173][T15181] ? __ia32_sys_shutdown+0x70/0x70 [ 515.328848][ T9814] kaweth 4-1:0.0: Firmware present in device. [ 515.329302][T15181] ? __lock_acquire+0x16c2/0x54b0 [ 515.340386][T15181] ___sys_recvmsg+0xd5/0x200 [ 515.345008][T15181] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 515.350669][T15181] ? find_held_lock+0x2d/0x110 [ 515.355454][T15181] ? __might_fault+0xd3/0x180 [ 515.360155][T15181] ? lock_downgrade+0x6d0/0x6d0 [ 515.365044][T15181] do_recvmmsg+0x24d/0x6c0 [ 515.369492][T15181] ? ___sys_recvmsg+0x200/0x200 [ 515.374363][T15181] ? lock_downgrade+0x6d0/0x6d0 [ 515.379239][T15181] ? ksys_write+0x12d/0x250 [ 515.383771][T15181] ? wait_for_completion_io+0x260/0x260 [ 515.389338][T15181] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 515.395606][T15181] ? vfs_write+0x18e/0xa80 [ 515.400038][T15181] __x64_sys_recvmmsg+0x20b/0x260 [ 515.405094][T15181] ? __do_sys_socketcall+0x590/0x590 [ 515.410401][T15181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 515.416314][T15181] do_syscall_64+0x2d/0x70 [ 515.420744][T15181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.426656][T15181] RIP: 0033:0x45e149 [ 515.430559][T15181] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 515.450183][T15181] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 515.458620][T15181] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 515.466690][T15181] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 515.474684][T15181] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 13:46:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x80) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 515.482666][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.490649][T15181] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 515.532819][ T9814] kaweth 4-1:0.0: Statistics collection: 0 [ 515.538811][ T9814] kaweth 4-1:0.0: Multicast filter limit: 0 13:46:28 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 515.585578][ T9814] kaweth 4-1:0.0: MTU: 0 [ 515.593055][ T34] audit: type=1800 audit(1608299188.803:59): pid=15201 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15756 res=0 errno=0 [ 515.620057][ T9814] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 515.694881][ T34] audit: type=1800 audit(1608299188.883:60): pid=15202 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15756 res=0 errno=0 [ 516.216518][ T9814] kaweth 4-1:0.0: kaweth interface created at eth5 [ 516.417476][ T3008] usb 4-1: USB disconnect, device number 19 13:46:30 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="44040000"], 0x44}, 0x1, 0x0, 0x0, 0x2000001}, 0x20000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f000095dffc)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180), 0xc) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$audion(0x0, 0x10001, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000300)={0x8, 0x2db0, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000280)={&(0x7f00000000c0)=[0x1, 0xfffeffff, 0x7, 0x5, 0x3c, 0xfffffff7, 0x7ffb, 0x0], 0x8, 0x40797de4f674da66, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r4, 0x600004) 13:46:30 executing program 2 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x38}}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12d36cfa749e11692705a8a407aefde9aff722f23d5c40a95ac37f00d17f4603bd2bac79644dee76f90101090224ffff05007498090400001207010300090501"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x9, 0x2, 0x6867, 0xfff}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) r3 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r3, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000140)={{r3}, {@void, @max='max'}}) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 13:46:30 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 517.139216][T15245] FAULT_INJECTION: forcing a failure. [ 517.139216][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.206661][T15245] CPU: 1 PID: 15245 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 517.215645][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.225715][T15245] Call Trace: [ 517.229015][T15245] dump_stack+0x107/0x163 [ 517.233374][T15245] should_fail.cold+0x5/0x1f [ 517.237997][T15245] _copy_from_user+0x2c/0x180 [ 517.242794][T15245] __copy_msghdr_from_user+0x91/0x4b0 [ 517.248194][T15245] ? __ia32_sys_shutdown+0x70/0x70 [ 517.253344][T15245] ? __lock_acquire+0x16c2/0x54b0 [ 517.258408][T15245] ___sys_recvmsg+0xd5/0x200 [ 517.263024][T15245] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 517.268694][T15245] ? find_held_lock+0x2d/0x110 [ 517.273488][T15245] ? __might_fault+0xd3/0x180 [ 517.278196][T15245] ? lock_downgrade+0x6d0/0x6d0 [ 517.283089][T15245] do_recvmmsg+0x24d/0x6c0 [ 517.287536][T15245] ? ___sys_recvmsg+0x200/0x200 [ 517.292520][T15245] ? lock_downgrade+0x6d0/0x6d0 [ 517.297401][T15245] ? ksys_write+0x12d/0x250 [ 517.301940][T15245] ? wait_for_completion_io+0x260/0x260 [ 517.307512][T15245] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 517.313778][T15245] ? vfs_write+0x18e/0xa80 [ 517.318223][T15245] __x64_sys_recvmmsg+0x20b/0x260 [ 517.323276][T15245] ? __do_sys_socketcall+0x590/0x590 [ 517.328588][T15245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 517.334513][T15245] do_syscall_64+0x2d/0x70 [ 517.338948][T15245] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.344862][T15245] RIP: 0033:0x45e149 [ 517.348781][T15245] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 517.368517][T15245] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 517.376955][T15245] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 517.384945][T15245] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 517.392937][T15245] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 517.401209][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 517.409190][T15245] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c 13:46:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:30 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 517.572433][ T5] usb 4-1: new high-speed USB device number 20 using dummy_hcd 13:46:30 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:30 executing program 2 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 517.842366][ T53] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 517.855280][T15279] FAULT_INJECTION: forcing a failure. [ 517.855280][T15279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.894361][T15279] CPU: 1 PID: 15279 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 517.902831][T15279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.912992][T15279] Call Trace: [ 517.916286][T15279] dump_stack+0x107/0x163 [ 517.920648][T15279] should_fail.cold+0x5/0x1f [ 517.925269][T15279] _copy_from_user+0x2c/0x180 [ 517.929981][T15279] __copy_msghdr_from_user+0x91/0x4b0 [ 517.935384][T15279] ? __ia32_sys_shutdown+0x70/0x70 [ 517.940521][T15279] ? __lock_acquire+0x16c2/0x54b0 [ 517.945581][T15279] ___sys_recvmsg+0xd5/0x200 [ 517.950197][T15279] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 517.955973][T15279] ? find_held_lock+0x2d/0x110 [ 517.960767][T15279] ? __might_fault+0xd3/0x180 [ 517.965477][T15279] ? lock_downgrade+0x6d0/0x6d0 [ 517.970367][T15279] do_recvmmsg+0x24d/0x6c0 [ 517.974812][T15279] ? ___sys_recvmsg+0x200/0x200 [ 517.979684][T15279] ? lock_downgrade+0x6d0/0x6d0 [ 517.984563][T15279] ? ksys_write+0x12d/0x250 [ 517.989097][T15279] ? wait_for_completion_io+0x260/0x260 [ 517.994668][T15279] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.000932][T15279] ? vfs_write+0x18e/0xa80 [ 518.005377][T15279] __x64_sys_recvmmsg+0x20b/0x260 [ 518.010431][T15279] ? __do_sys_socketcall+0x590/0x590 [ 518.015741][T15279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 518.021667][T15279] do_syscall_64+0x2d/0x70 [ 518.026102][T15279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.032020][T15279] RIP: 0033:0x45e149 [ 518.035925][T15279] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 518.055630][T15279] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 518.064064][T15279] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 518.072052][T15279] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 518.080041][T15279] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 13:46:31 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 518.088021][T15279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 518.096001][T15279] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 518.162424][ T5] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 518.183119][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.225160][ T5] usb 4-1: config 0 descriptor?? 13:46:31 executing program 2 (fault-call:4 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 518.432447][ T53] usb 1-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 518.434292][T15297] FAULT_INJECTION: forcing a failure. [ 518.434292][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.441645][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.488306][ T53] usb 1-1: config 0 descriptor?? [ 518.532908][ T5] kaweth 4-1:0.0: Firmware present in device. [ 518.539996][T15297] CPU: 0 PID: 15297 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 518.548400][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.558448][T15297] Call Trace: [ 518.561736][T15297] dump_stack+0x107/0x163 [ 518.566090][T15297] should_fail.cold+0x5/0x1f [ 518.570716][T15297] _copy_from_user+0x2c/0x180 [ 518.575419][T15297] __copy_msghdr_from_user+0x91/0x4b0 [ 518.580811][T15297] ? __ia32_sys_shutdown+0x70/0x70 [ 518.585945][T15297] ? __lock_acquire+0x16c2/0x54b0 [ 518.591001][T15297] ___sys_recvmsg+0xd5/0x200 [ 518.595614][T15297] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 518.601276][T15297] ? find_held_lock+0x2d/0x110 [ 518.606068][T15297] ? __might_fault+0xd3/0x180 [ 518.610770][T15297] ? lock_downgrade+0x6d0/0x6d0 [ 518.615674][T15297] do_recvmmsg+0x24d/0x6c0 [ 518.620115][T15297] ? ___sys_recvmsg+0x200/0x200 [ 518.624984][T15297] ? lock_downgrade+0x6d0/0x6d0 [ 518.626127][ T9814] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 518.629852][T15297] ? ksys_write+0x12d/0x250 [ 518.641882][T15297] ? wait_for_completion_io+0x260/0x260 [ 518.647449][T15297] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.653724][T15297] ? vfs_write+0x18e/0xa80 [ 518.658166][T15297] __x64_sys_recvmmsg+0x20b/0x260 [ 518.663217][T15297] ? __do_sys_socketcall+0x590/0x590 [ 518.668531][T15297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 518.674455][T15297] do_syscall_64+0x2d/0x70 [ 518.678889][T15297] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.684803][T15297] RIP: 0033:0x45e149 [ 518.688717][T15297] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 518.708344][T15297] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 518.716778][T15297] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 518.724762][T15297] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 518.732753][T15297] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 518.740736][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 518.748725][T15297] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 518.802932][ T5] kaweth 4-1:0.0: Statistics collection: 0 [ 518.808920][ T5] kaweth 4-1:0.0: Multicast filter limit: 0 [ 518.815815][ T53] kaweth 1-1:0.0: Firmware present in device. [ 518.842305][ T9814] usb 2-1: device descriptor read/64, error 18 [ 518.872174][ T5] kaweth 4-1:0.0: MTU: 0 [ 518.876514][ T5] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 519.012461][ T53] kaweth 1-1:0.0: Statistics collection: 0 [ 519.019357][ T53] kaweth 1-1:0.0: Multicast filter limit: 0 [ 519.048685][ T53] kaweth 1-1:0.0: MTU: 0 [ 519.064561][ T53] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 519.112225][ T9814] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 519.312156][ T9814] usb 2-1: device descriptor read/64, error 18 [ 519.437874][ T9814] usb usb2-port1: attempt power cycle [ 519.446390][ T5] kaweth 4-1:0.0: kaweth interface created at eth5 [ 519.654629][ T7] usb 4-1: USB disconnect, device number 20 [ 519.671367][ T53] kaweth 1-1:0.0: kaweth interface created at eth6 [ 519.896317][ T5] usb 1-1: USB disconnect, device number 12 13:46:33 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:33 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:33 executing program 2 (fault-call:4 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 520.120798][T15348] FAULT_INJECTION: forcing a failure. [ 520.120798][T15348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.152180][ T9814] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 520.160058][T15348] CPU: 1 PID: 15348 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 520.168495][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.178652][T15348] Call Trace: [ 520.181949][T15348] dump_stack+0x107/0x163 [ 520.186311][T15348] should_fail.cold+0x5/0x1f [ 520.190934][T15348] _copy_from_user+0x2c/0x180 [ 520.195643][T15348] __copy_msghdr_from_user+0x91/0x4b0 [ 520.201046][T15348] ? __ia32_sys_shutdown+0x70/0x70 [ 520.206189][T15348] ? __lock_acquire+0x16c2/0x54b0 [ 520.211250][T15348] ___sys_recvmsg+0xd5/0x200 [ 520.215864][T15348] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 520.221535][T15348] ? find_held_lock+0x2d/0x110 [ 520.226324][T15348] ? __might_fault+0xd3/0x180 [ 520.231029][T15348] ? lock_downgrade+0x6d0/0x6d0 [ 520.235920][T15348] do_recvmmsg+0x24d/0x6c0 [ 520.240374][T15348] ? ___sys_recvmsg+0x200/0x200 [ 520.245263][T15348] ? lock_downgrade+0x6d0/0x6d0 [ 520.250143][T15348] ? ksys_write+0x12d/0x250 [ 520.254675][T15348] ? wait_for_completion_io+0x260/0x260 [ 520.260256][T15348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 520.266525][T15348] ? vfs_write+0x18e/0xa80 [ 520.270967][T15348] __x64_sys_recvmmsg+0x20b/0x260 [ 520.276016][T15348] ? __do_sys_socketcall+0x590/0x590 [ 520.281325][T15348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 520.287249][T15348] do_syscall_64+0x2d/0x70 [ 520.291681][T15348] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.297599][T15348] RIP: 0033:0x45e149 [ 520.301504][T15348] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 520.321127][T15348] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 520.329559][T15348] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 520.337552][T15348] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 520.345533][T15348] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 520.353513][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 520.361512][T15348] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c 13:46:33 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:33 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:33 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa7a3608f57e2966a90544d9b5d22b6efe15afa8d72291d2ba846706d7e416535d7068181718a726d85d1fb1b906655664187d0bfc4cffe825983d40711d5016fec1aa15ab69dc377b68cad30ef9fe0e49fac14ccb7a5a37949b41c2433567cd4beb29d31f7728c5532db2", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:33 executing program 2 (fault-call:4 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 520.612049][ T9814] usb 2-1: device descriptor read/8, error -71 [ 520.736367][T15366] FAULT_INJECTION: forcing a failure. [ 520.736367][T15366] name fail_usercopy, interval 1, probability 0, space 0, times 0 13:46:34 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 520.776833][T15366] CPU: 1 PID: 15366 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 520.785383][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.795469][T15366] Call Trace: [ 520.798758][T15366] dump_stack+0x107/0x163 [ 520.803113][T15366] should_fail.cold+0x5/0x1f [ 520.807727][T15366] _copy_from_user+0x2c/0x180 [ 520.812434][T15366] __copy_msghdr_from_user+0x91/0x4b0 [ 520.817829][T15366] ? __ia32_sys_shutdown+0x70/0x70 13:46:34 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 520.822964][T15366] ? __lock_acquire+0x16c2/0x54b0 [ 520.828023][T15366] ___sys_recvmsg+0xd5/0x200 [ 520.832635][T15366] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 520.838301][T15366] ? find_held_lock+0x2d/0x110 [ 520.843086][T15366] ? __might_fault+0xd3/0x180 [ 520.847793][T15366] ? lock_downgrade+0x6d0/0x6d0 [ 520.852684][T15366] do_recvmmsg+0x24d/0x6c0 [ 520.857125][T15366] ? ___sys_recvmsg+0x200/0x200 [ 520.862013][T15366] ? lock_downgrade+0x6d0/0x6d0 [ 520.866887][T15366] ? ksys_write+0x12d/0x250 [ 520.871421][T15366] ? wait_for_completion_io+0x260/0x260 [ 520.876993][T15366] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 520.883257][T15366] ? vfs_write+0x18e/0xa80 [ 520.887700][T15366] __x64_sys_recvmmsg+0x20b/0x260 [ 520.892754][T15366] ? __do_sys_socketcall+0x590/0x590 [ 520.898065][T15366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 520.904077][T15366] do_syscall_64+0x2d/0x70 [ 520.908508][T15366] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.914423][T15366] RIP: 0033:0x45e149 [ 520.918328][T15366] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 520.937953][T15366] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 520.946387][T15366] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 520.954372][T15366] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 520.962353][T15366] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 520.970335][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 520.978327][T15366] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 521.071896][ T53] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 521.082062][ T9818] usb 4-1: new high-speed USB device number 21 using dummy_hcd 13:46:34 executing program 2 (fault-call:4 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:34 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 521.314927][T15377] FAULT_INJECTION: forcing a failure. [ 521.314927][T15377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.357795][T15377] CPU: 1 PID: 15377 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 521.366256][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.376325][T15377] Call Trace: [ 521.379612][T15377] dump_stack+0x107/0x163 [ 521.383970][T15377] should_fail.cold+0x5/0x1f [ 521.388592][T15377] _copy_from_user+0x2c/0x180 [ 521.393297][T15377] __copy_msghdr_from_user+0x91/0x4b0 [ 521.398698][T15377] ? __ia32_sys_shutdown+0x70/0x70 [ 521.403836][T15377] ? __lock_acquire+0x16c2/0x54b0 [ 521.408899][T15377] ___sys_recvmsg+0xd5/0x200 [ 521.413511][T15377] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 521.419178][T15377] ? find_held_lock+0x2d/0x110 [ 521.423969][T15377] ? __might_fault+0xd3/0x180 [ 521.428679][T15377] ? lock_downgrade+0x6d0/0x6d0 [ 521.433573][T15377] do_recvmmsg+0x24d/0x6c0 [ 521.438016][T15377] ? ___sys_recvmsg+0x200/0x200 [ 521.442885][T15377] ? lock_downgrade+0x6d0/0x6d0 [ 521.447763][T15377] ? ksys_write+0x12d/0x250 [ 521.452314][T15377] ? wait_for_completion_io+0x260/0x260 [ 521.457884][T15377] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 521.464149][T15377] ? vfs_write+0x18e/0xa80 [ 521.468604][T15377] __x64_sys_recvmmsg+0x20b/0x260 [ 521.473671][T15377] ? __do_sys_socketcall+0x590/0x590 [ 521.478979][T15377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 521.484901][T15377] do_syscall_64+0x2d/0x70 [ 521.489346][T15377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.495263][T15377] RIP: 0033:0x45e149 [ 521.499174][T15377] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 521.518798][T15377] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 521.527235][T15377] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 521.535223][T15377] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 521.543208][T15377] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 521.551190][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 521.559176][T15377] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 521.652635][ T53] usb 1-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 521.681782][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.701871][ T9818] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 521.710949][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.734073][ T53] usb 1-1: config 0 descriptor?? [ 521.748064][ T9818] usb 4-1: config 0 descriptor?? [ 522.031944][ T9818] kaweth 4-1:0.0: Firmware present in device. [ 522.062760][ T53] kaweth 1-1:0.0: Firmware present in device. [ 522.231874][ T9818] kaweth 4-1:0.0: Statistics collection: 0 [ 522.237735][ T9818] kaweth 4-1:0.0: Multicast filter limit: 0 [ 522.251685][ T9818] kaweth 4-1:0.0: MTU: 0 [ 522.255964][ T9818] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 522.281985][ T53] kaweth 1-1:0.0: Statistics collection: 0 [ 522.287846][ T53] kaweth 1-1:0.0: Multicast filter limit: 0 [ 522.301822][ T53] kaweth 1-1:0.0: MTU: 0 [ 522.306089][ T53] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 522.905385][ T9818] kaweth 4-1:0.0: kaweth interface created at eth5 [ 522.936150][ T53] kaweth 1-1:0.0: kaweth interface created at eth6 13:46:36 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:36 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140), 0x1400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) ioctl$TIOCGISO7816(r2, 0x540a, 0x0) 13:46:36 executing program 2 (fault-call:4 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 523.111319][ T7] usb 4-1: USB disconnect, device number 21 [ 523.239885][T15414] FAULT_INJECTION: forcing a failure. [ 523.239885][T15414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.246387][ T3008] usb 1-1: USB disconnect, device number 13 [ 523.315892][T15414] CPU: 1 PID: 15414 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 523.324352][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.334420][T15414] Call Trace: [ 523.337711][T15414] dump_stack+0x107/0x163 [ 523.342079][T15414] should_fail.cold+0x5/0x1f [ 523.346696][T15414] _copy_from_user+0x2c/0x180 [ 523.351405][T15414] __copy_msghdr_from_user+0x91/0x4b0 [ 523.356797][T15414] ? __ia32_sys_shutdown+0x70/0x70 [ 523.361933][T15414] ? __lock_acquire+0x16c2/0x54b0 13:46:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:36 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:37 executing program 0: r0 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "f9facbd85a2b71e564d110bb2ee29c56"}, 0x11, 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x87ffffc) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000380)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x320) sendfile(r1, r1, 0x0, 0x8080fffffffe) 13:46:37 executing program 2 (fault-call:4 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:37 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 523.367014][T15414] ___sys_recvmsg+0xd5/0x200 [ 523.367050][T15414] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 523.367090][T15414] ? find_held_lock+0x2d/0x110 13:46:37 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20341, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000000)={0x9, 0x14, [0xfffffffd, 0x4, 0x2, 0x0, 0x952]}) r3 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r3) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x14, &(0x7f0000000080), 0x20396578) 13:46:37 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x10800, 0x101) r1 = dup2(r0, r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffff, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x4, @local, 'veth0\x00'}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"ac6d1d5941f31051be5b80907dfa0139", r3, 0x0, {0x3ff, 0x6}, {0x7ff, 0x5}, 0x9, [0x7, 0xffff, 0x2, 0x2e48, 0x2, 0x3f, 0x3ab, 0x80, 0x4, 0x5, 0x0, 0x8, 0x400, 0x3, 0x7, 0x2]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000540)) socketpair(0x2d, 0x6, 0x2, &(0x7f0000000580)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r4, 0x80000000) mknod(&(0x7f00000005c0)='./file0\x00', 0x82, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x4, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x0, 0x0) r6 = signalfd(r0, &(0x7f0000000680)={[0x400]}, 0x8) accept4$unix(r6, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e, 0x80800) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vmci\x00', 0x2, 0x0) fcntl$notify(r7, 0x402, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000007c0)={0x2, 0x0, 0x10001}) [ 523.367123][T15414] ? __might_fault+0xd3/0x180 [ 523.367154][T15414] ? lock_downgrade+0x6d0/0x6d0 [ 523.367196][T15414] do_recvmmsg+0x24d/0x6c0 [ 523.367226][T15414] ? ___sys_recvmsg+0x200/0x200 [ 523.367251][T15414] ? lock_downgrade+0x6d0/0x6d0 [ 523.367282][T15414] ? ksys_write+0x12d/0x250 [ 523.367318][T15414] ? wait_for_completion_io+0x260/0x260 [ 523.367350][T15414] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 523.367378][T15414] ? vfs_write+0x18e/0xa80 [ 523.367406][T15414] __x64_sys_recvmmsg+0x20b/0x260 [ 523.367435][T15414] ? __do_sys_socketcall+0x590/0x590 [ 523.367463][T15414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.367498][T15414] do_syscall_64+0x2d/0x70 [ 523.367523][T15414] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.367552][T15414] RIP: 0033:0x45e149 [ 523.367572][T15414] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.367595][T15414] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 523.367624][T15414] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 523.367642][T15414] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 523.367661][T15414] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 523.367690][T15414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 523.367704][T15414] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 524.050829][ T9818] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 524.077047][T15466] FAULT_INJECTION: forcing a failure. [ 524.077047][T15466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.077082][T15466] CPU: 0 PID: 15466 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 524.077109][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.077126][T15466] Call Trace: [ 524.077135][T15466] dump_stack+0x107/0x163 [ 524.077169][T15466] should_fail.cold+0x5/0x1f [ 524.077199][T15466] _copy_from_user+0x2c/0x180 [ 524.077242][T15466] __copy_msghdr_from_user+0x91/0x4b0 [ 524.077274][T15466] ? __ia32_sys_shutdown+0x70/0x70 [ 524.077305][T15466] ? __lock_acquire+0x16c2/0x54b0 [ 524.077345][T15466] ___sys_recvmsg+0xd5/0x200 [ 524.077373][T15466] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 524.077411][T15466] ? find_held_lock+0x2d/0x110 [ 524.077439][T15466] ? __might_fault+0xd3/0x180 [ 524.077470][T15466] ? lock_downgrade+0x6d0/0x6d0 [ 524.077513][T15466] do_recvmmsg+0x24d/0x6c0 [ 524.077546][T15466] ? ___sys_recvmsg+0x200/0x200 [ 524.077573][T15466] ? lock_downgrade+0x6d0/0x6d0 [ 524.077606][T15466] ? ksys_write+0x12d/0x250 [ 524.077642][T15466] ? wait_for_completion_io+0x260/0x260 [ 524.077671][T15466] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 524.077699][T15466] ? vfs_write+0x18e/0xa80 [ 524.077727][T15466] __x64_sys_recvmmsg+0x20b/0x260 [ 524.077756][T15466] ? __do_sys_socketcall+0x590/0x590 [ 524.077792][T15466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 524.077829][T15466] do_syscall_64+0x2d/0x70 [ 524.077853][T15466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.077884][T15466] RIP: 0033:0x45e149 [ 524.077905][T15466] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.077930][T15466] RSP: 002b:00007fc821fafc68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 524.077957][T15466] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 524.077975][T15466] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 524.077992][T15466] RBP: 00007fc821fafca0 R08: 0000000000000000 R09: 0000000000000000 [ 524.078009][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 524.078025][T15466] R13: 00000000016afb7f R14: 00007fc821fb09c0 R15: 000000000119bf8c [ 524.410371][ T9818] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 524.410409][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.415087][ T9818] usb 4-1: config 0 descriptor?? [ 524.711612][ T9818] kaweth 4-1:0.0: Firmware present in device. [ 524.911557][ T9818] kaweth 4-1:0.0: Statistics collection: 0 [ 524.911586][ T9818] kaweth 4-1:0.0: Multicast filter limit: 0 [ 524.911606][ T9818] kaweth 4-1:0.0: MTU: 0 [ 524.911625][ T9818] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 525.583606][ T9818] kaweth 4-1:0.0: kaweth interface created at eth5 [ 525.774774][ T53] usb 4-1: USB disconnect, device number 22 13:46:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00', 0x7}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 13:46:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:46:39 executing program 2 (fault-call:4 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:39 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:39 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030367", @ANYRES16, @ANYBLOB="00022abd7000fddbdf253fcc642f020000002b3cf7b0d044f14d88000500030000004400035f31000000000600040007000000060007004e080001000000140006050000000000000000000000000000000020000381080005007f000001140002006d61637365633000000000000000000008ba7200a80a00000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a16e02b3", @ANYRES16, @ANYBLOB="00032abd7000fcdbdf25040000000800050000000100080006000000000008000400ff0000000800060007000000080005009c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0xf8, 0x0, 0x200, 0x70bd29, 0x25dfdc01, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x26}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ce2632a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc9f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x185}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x9c03c295b5f20a5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffbff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x51}, 0x40) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x7afb43a6e79f72bc, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb45}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x8004) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250f000000080006000700000008000600eced0000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) mknod(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80000, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x20) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r2, 0x0, 0x0) keyctl$get_persistent(0x16, r0, r2) open(0x0, 0x420401, 0x49) dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) [ 526.361391][T15532] FAULT_INJECTION: forcing a failure. [ 526.361391][T15532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.388637][T15532] CPU: 0 PID: 15532 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 526.397092][T15532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.407161][T15532] Call Trace: [ 526.410468][T15532] dump_stack+0x107/0x163 [ 526.414838][T15532] should_fail.cold+0x5/0x1f [ 526.419458][T15532] _copy_from_user+0x2c/0x180 [ 526.424175][T15532] __copy_msghdr_from_user+0x91/0x4b0 [ 526.429571][T15532] ? __ia32_sys_shutdown+0x70/0x70 [ 526.434706][T15532] ? __lock_acquire+0x16c2/0x54b0 [ 526.439770][T15532] ___sys_recvmsg+0xd5/0x200 [ 526.444385][T15532] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 526.450053][T15532] ? find_held_lock+0x2d/0x110 [ 526.454838][T15532] ? __might_fault+0xd3/0x180 [ 526.459542][T15532] ? lock_downgrade+0x6d0/0x6d0 [ 526.464436][T15532] do_recvmmsg+0x24d/0x6c0 [ 526.468887][T15532] ? ___sys_recvmsg+0x200/0x200 [ 526.473758][T15532] ? lock_downgrade+0x6d0/0x6d0 [ 526.478640][T15532] ? ksys_write+0x12d/0x250 [ 526.483175][T15532] ? wait_for_completion_io+0x260/0x260 [ 526.488861][T15532] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 526.495127][T15532] ? vfs_write+0x18e/0xa80 [ 526.499572][T15532] __x64_sys_recvmmsg+0x20b/0x260 [ 526.504632][T15532] ? __do_sys_socketcall+0x590/0x590 [ 526.509947][T15532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 526.515887][T15532] do_syscall_64+0x2d/0x70 [ 526.520325][T15532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.526243][T15532] RIP: 0033:0x45e149 [ 526.530152][T15532] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.549773][T15532] RSP: 002b:00007fc821f8ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 526.558207][T15532] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 526.566188][T15532] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 526.574172][T15532] RBP: 00007fc821f8eca0 R08: 0000000000000000 R09: 0000000000000000 [ 526.582157][T15532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 526.590155][T15532] R13: 00000000016afb7f R14: 00007fc821f8f9c0 R15: 000000000119c034 13:46:39 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 526.771263][ T53] usb 4-1: new high-speed USB device number 23 using dummy_hcd 13:46:40 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00', 0x7}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 13:46:40 executing program 2 (fault-call:4 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 527.151991][ T53] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 527.171397][T15575] FAULT_INJECTION: forcing a failure. [ 527.171397][T15575] name fail_usercopy, interval 1, probability 0, space 0, times 0 13:46:40 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 527.202366][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.230008][T15575] CPU: 1 PID: 15575 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 527.238457][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.248529][T15575] Call Trace: [ 527.251819][T15575] dump_stack+0x107/0x163 [ 527.256174][T15575] should_fail.cold+0x5/0x1f [ 527.260795][T15575] _copy_from_user+0x2c/0x180 [ 527.265504][T15575] __copy_msghdr_from_user+0x91/0x4b0 [ 527.270897][T15575] ? __ia32_sys_shutdown+0x70/0x70 [ 527.276031][T15575] ? __lock_acquire+0x16c2/0x54b0 [ 527.281086][T15575] ___sys_recvmsg+0xd5/0x200 [ 527.285704][T15575] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 527.291370][T15575] ? find_held_lock+0x2d/0x110 [ 527.296161][T15575] ? __might_fault+0xd3/0x180 [ 527.300861][T15575] ? lock_downgrade+0x6d0/0x6d0 [ 527.305760][T15575] do_recvmmsg+0x24d/0x6c0 [ 527.310203][T15575] ? ___sys_recvmsg+0x200/0x200 [ 527.315071][T15575] ? lock_downgrade+0x6d0/0x6d0 [ 527.320052][T15575] ? ksys_write+0x12d/0x250 [ 527.324582][T15575] ? wait_for_completion_io+0x260/0x260 [ 527.330153][T15575] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 527.336415][T15575] ? vfs_write+0x18e/0xa80 [ 527.340867][T15575] __x64_sys_recvmmsg+0x20b/0x260 [ 527.345916][T15575] ? __do_sys_socketcall+0x590/0x590 [ 527.351227][T15575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 527.357255][T15575] do_syscall_64+0x2d/0x70 [ 527.361680][T15575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.367608][T15575] RIP: 0033:0x45e149 [ 527.371516][T15575] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.391136][T15575] RSP: 002b:00007fc821f8ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.399571][T15575] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e149 [ 527.407557][T15575] RDX: 0400000000000034 RSI: 0000000020002b40 RDI: 0000000000000005 [ 527.415541][T15575] RBP: 00007fc821f8eca0 R08: 0000000000000000 R09: 0000000000000000 [ 527.423526][T15575] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 527.431511][T15575] R13: 00000000016afb7f R14: 00007fc821f8f9c0 R15: 000000000119c034 [ 527.468690][ T53] usb 4-1: config 0 descriptor?? 13:46:40 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:40 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:40 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 527.760957][ T53] kaweth 4-1:0.0: Firmware present in device. [ 527.961373][ T53] kaweth 4-1:0.0: Statistics collection: 0 [ 527.967237][ T53] kaweth 4-1:0.0: Multicast filter limit: 0 [ 527.976191][ T53] kaweth 4-1:0.0: MTU: 0 [ 527.980501][ T53] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 528.219614][T15611] IPVS: ftp: loaded support on port[0] = 21 [ 528.594843][ T53] kaweth 4-1:0.0: kaweth interface created at eth5 [ 528.812252][ T3008] usb 4-1: USB disconnect, device number 23 13:46:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:42 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2bb7e5d05b27ca0068113a06a70710d25476ac84d60ffd33ce3aa8567b88d24c268c5742c698c0941877570c35f267fcf7a375", @ANYRES32=0x0, @ANYBLOB="8000000000dfffff270012800b00010065727370616e00001800028004001200080004000000000006000f0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200088d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:46:42 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:42 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:42 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x20341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:42 executing program 4: pipe(0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) [ 529.740904][ T3008] usb 4-1: new high-speed USB device number 24 using dummy_hcd 13:46:43 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40034, 0x0, 0x0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 530.121692][ T3008] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 530.150565][ T3008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.183742][ T3008] usb 4-1: config 0 descriptor?? [ 530.465252][ T3008] kaweth 4-1:0.0: Firmware present in device. 13:46:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:43 executing program 4: pipe(0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:43 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 530.660764][ T3008] kaweth 4-1:0.0: Statistics collection: 0 [ 530.666804][ T3008] kaweth 4-1:0.0: Multicast filter limit: 0 [ 530.727870][ T3008] kaweth 4-1:0.0: MTU: 0 [ 530.752963][ T3008] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 531.310637][ T3008] kaweth 4-1:0.0: Error setting receive filter [ 531.318389][ T3008] kaweth: probe of 4-1:0.0 failed with error -5 [ 531.357650][ T3008] usb 4-1: USB disconnect, device number 24 13:46:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:45 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:45 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:45 executing program 4: pipe(0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r2, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) 13:46:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000001800000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}}, 0x24}}, 0x11) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:46:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x3, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 531.892799][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 531.973114][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:45 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x738, 0x1705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xffff, 0x20, 0x1, {0x22, 0x1f1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x40, 0x2, 0x3, 0x40, 0x9b}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x3, [@generic={0x30, 0x10, 0x4, "c0ec0d3ce64e0dc09d609ed7042bc2a44b05c3909ce4510f24e44b07d8361ecb5ffaf872862d64e891013e449e"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x89, &(0x7f0000000180)=@string={0x89, 0x3, "5c67a57fb1dbbf0ddcb0ae73089a72a9284fe8d77f7ce6060a10b84286ade0f20ca2dac47669ddf9dc8f0df16741f18c3be740caacfd54ea2dfedbd7cd3596f757812db9e34b231201dabfc6a23677bb8f9e825683212ec63a1399726e6ea794bdebf22b8afef30b3d3e41aa855f6c6b7bda03e8fa0badf158739c64d01d4fdac85cc116e8810b"}}, {0x29, &(0x7f0000000240)=@string={0x29, 0x3, "22f8f3d9e40501de39b34e6d3099b858d7a05fab158af38d2ebacf4579f064dcd9475ba3132ba9"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "966a423a40973158968c29f95d76f42a847ff4a42ebe6265db8321ad7bcaf219a54cb753d446459085a1841be40c5b3c6a508fef25f2b814e00e95c920fd61c7aaaa17eb6b7d13a287dba8df59498db825b0578296cc91b018d2fc642630a28c94a504669df56d71ca26aa7d38f5b62cef6e9d73bcb7103efe3af676426b49c756be7fef5cabc8e681fa19bea4d1ee65510b8c8574adf860aad9c03c0e89321fd1b4bec4f831d6539b76a7e121ffbf81ec89bda77f2a7d98fcfe9d719d533e733b3e1a64d4c8dc94b819966827dcb4a5d5a8183b99c99b638e0ae36d69ae"}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "5d812c873161e8422e8d79b1d4a79cea45487bf7bc7d31a16562f369e9e8cf3d5fe56a5fdfcce8a5eb41668ec1"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$batadv(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$caif_stream(0x25, 0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 13:46:45 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 532.290670][ T53] usb 4-1: new high-speed USB device number 25 using dummy_hcd 13:46:45 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 532.701268][ T53] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 532.710593][ T9814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 532.729187][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:46:46 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 532.784734][ T53] usb 4-1: config 0 descriptor?? 13:46:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x4, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 532.980810][ T9814] usb 1-1: Using ep0 maxpacket: 8 [ 533.082943][ T53] kaweth 4-1:0.0: Firmware present in device. [ 533.190477][ T9814] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 533.215974][ T9814] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 533.270649][ T9814] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 533.290561][ T53] kaweth 4-1:0.0: Statistics collection: 0 [ 533.296411][ T53] kaweth 4-1:0.0: Multicast filter limit: 0 [ 533.328310][ T53] kaweth 4-1:0.0: MTU: 0 [ 533.336560][ T9814] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 533.358242][ T53] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 533.400891][ T9814] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 533.424358][ T9814] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 533.468926][ T9814] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 533.612070][ T9814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 533.642095][ T9814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 533.665870][ T9814] usb 1-1: SerialNumber: syz [ 533.777786][T15758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.838236][T15758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.911338][ T9814] hub 1-1:5.0: bad descriptor, ignoring hub [ 533.917468][ T9814] hub: probe of 1-1:5.0 failed with error -5 [ 533.951053][ T53] kaweth 4-1:0.0: Error setting receive filter [ 533.957402][ T53] kaweth: probe of 4-1:0.0 failed with error -5 [ 533.991768][ T53] usb 4-1: USB disconnect, device number 25 [ 534.170546][T15758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 534.193987][T15758] raw-gadget gadget: fail, usb_ep_enable returned -22 13:46:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:47 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:47 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xfc, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:47 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 534.521483][T15758] udc-core: couldn't find an available UDC or it's busy [ 534.557375][T15758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 534.692588][ T9814] usblp 1-1:5.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:46:48 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 534.950113][ T3008] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 535.110386][ T9823] usb 1-1: USB disconnect, device number 14 [ 535.151007][ T9823] usblp0: removed [ 535.310868][ T3008] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 535.324110][ T3008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.353052][ T3008] usb 4-1: config 0 descriptor?? [ 535.540010][ T53] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 535.625845][ T3008] kaweth 4-1:0.0: Firmware present in device. [ 535.808510][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 535.830537][ T3008] kaweth 4-1:0.0: Statistics collection: 0 [ 535.836392][ T3008] kaweth 4-1:0.0: Multicast filter limit: 0 [ 535.852023][ T3008] kaweth 4-1:0.0: MTU: 0 [ 535.856511][ T3008] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 535.960514][ T53] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 535.969010][ T53] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 535.991653][ T53] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 536.001798][ T53] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 536.013213][ T53] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 536.024178][ T53] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 536.035856][ T53] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 536.170288][ T53] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 536.179371][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 536.188696][ T53] usb 1-1: SerialNumber: syz 13:46:49 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:49 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x300, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:49 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x738, 0x1705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xffff, 0x20, 0x1, {0x22, 0x1f1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x40, 0x2, 0x3, 0x40, 0x9b}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x3, [@generic={0x30, 0x10, 0x4, "c0ec0d3ce64e0dc09d609ed7042bc2a44b05c3909ce4510f24e44b07d8361ecb5ffaf872862d64e891013e449e"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x89, &(0x7f0000000180)=@string={0x89, 0x3, "5c67a57fb1dbbf0ddcb0ae73089a72a9284fe8d77f7ce6060a10b84286ade0f20ca2dac47669ddf9dc8f0df16741f18c3be740caacfd54ea2dfedbd7cd3596f757812db9e34b231201dabfc6a23677bb8f9e825683212ec63a1399726e6ea794bdebf22b8afef30b3d3e41aa855f6c6b7bda03e8fa0badf158739c64d01d4fdac85cc116e8810b"}}, {0x29, &(0x7f0000000240)=@string={0x29, 0x3, "22f8f3d9e40501de39b34e6d3099b858d7a05fab158af38d2ebacf4579f064dcd9475ba3132ba9"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "966a423a40973158968c29f95d76f42a847ff4a42ebe6265db8321ad7bcaf219a54cb753d446459085a1841be40c5b3c6a508fef25f2b814e00e95c920fd61c7aaaa17eb6b7d13a287dba8df59498db825b0578296cc91b018d2fc642630a28c94a504669df56d71ca26aa7d38f5b62cef6e9d73bcb7103efe3af676426b49c756be7fef5cabc8e681fa19bea4d1ee65510b8c8574adf860aad9c03c0e89321fd1b4bec4f831d6539b76a7e121ffbf81ec89bda77f2a7d98fcfe9d719d533e733b3e1a64d4c8dc94b819966827dcb4a5d5a8183b99c99b638e0ae36d69ae"}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "5d812c873161e8422e8d79b1d4a79cea45487bf7bc7d31a16562f369e9e8cf3d5fe56a5fdfcce8a5eb41668ec1"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$batadv(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$caif_stream(0x25, 0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 536.330208][ T53] usb 1-1: can't set config #5, error -71 [ 536.337610][ T53] usb 1-1: USB disconnect, device number 15 [ 536.480194][ T3008] kaweth 4-1:0.0: Error setting receive filter [ 536.486947][ T3008] kaweth: probe of 4-1:0.0 failed with error -5 13:46:49 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 536.572927][ T3008] usb 4-1: USB disconnect, device number 26 [ 536.910125][ T53] usb 1-1: new high-speed USB device number 16 using dummy_hcd 13:46:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:50 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:50 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:50 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 537.170108][ T53] usb 1-1: Using ep0 maxpacket: 8 13:46:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x80fe, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 537.319405][ T53] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 537.343723][ T53] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 13:46:50 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 537.378504][ T53] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 13:46:50 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 537.450002][ T53] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 537.504412][ T53] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 537.538432][ T53] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 537.583549][ T53] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 13:46:51 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 537.729964][ T53] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 537.762025][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.799831][ T53] usb 1-1: SerialNumber: syz [ 537.812039][ T17] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 537.909117][T15881] raw-gadget gadget: fail, usb_ep_enable returned -22 13:46:51 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 537.985825][T15881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 538.073943][ T53] hub 1-1:5.0: bad descriptor, ignoring hub [ 538.080513][ T53] hub: probe of 1-1:5.0 failed with error -5 [ 538.237675][ T17] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 538.257567][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.277868][ T17] usb 4-1: config 0 descriptor?? [ 538.433606][T15881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 538.472118][T15881] raw-gadget gadget: fail, usb_ep_enable returned -22 13:46:51 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x738, 0x1705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xffff, 0x20, 0x1, {0x22, 0x1f1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x40, 0x2, 0x3, 0x40, 0x9b}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x3, [@generic={0x30, 0x10, 0x4, "c0ec0d3ce64e0dc09d609ed7042bc2a44b05c3909ce4510f24e44b07d8361ecb5ffaf872862d64e891013e449e"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x89, &(0x7f0000000180)=@string={0x89, 0x3, "5c67a57fb1dbbf0ddcb0ae73089a72a9284fe8d77f7ce6060a10b84286ade0f20ca2dac47669ddf9dc8f0df16741f18c3be740caacfd54ea2dfedbd7cd3596f757812db9e34b231201dabfc6a23677bb8f9e825683212ec63a1399726e6ea794bdebf22b8afef30b3d3e41aa855f6c6b7bda03e8fa0badf158739c64d01d4fdac85cc116e8810b"}}, {0x29, &(0x7f0000000240)=@string={0x29, 0x3, "22f8f3d9e40501de39b34e6d3099b858d7a05fab158af38d2ebacf4579f064dcd9475ba3132ba9"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "966a423a40973158968c29f95d76f42a847ff4a42ebe6265db8321ad7bcaf219a54cb753d446459085a1841be40c5b3c6a508fef25f2b814e00e95c920fd61c7aaaa17eb6b7d13a287dba8df59498db825b0578296cc91b018d2fc642630a28c94a504669df56d71ca26aa7d38f5b62cef6e9d73bcb7103efe3af676426b49c756be7fef5cabc8e681fa19bea4d1ee65510b8c8574adf860aad9c03c0e89321fd1b4bec4f831d6539b76a7e121ffbf81ec89bda77f2a7d98fcfe9d719d533e733b3e1a64d4c8dc94b819966827dcb4a5d5a8183b99c99b638e0ae36d69ae"}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "5d812c873161e8422e8d79b1d4a79cea45487bf7bc7d31a16562f369e9e8cf3d5fe56a5fdfcce8a5eb41668ec1"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$batadv(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$caif_stream(0x25, 0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 538.603128][ T17] kaweth 4-1:0.0: Firmware present in device. [ 538.795754][T15881] udc-core: couldn't find an available UDC or it's busy [ 538.803588][ T17] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 538.812518][ T17] kaweth: probe of 4-1:0.0 failed with error -5 [ 538.830559][T15881] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 538.957855][ T53] usblp 1-1:5.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 539.331076][ T3008] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 539.569541][ T3008] usb 2-1: Using ep0 maxpacket: 8 [ 539.645677][T15881] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 539.710351][ T3008] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 539.718843][ T3008] usb 2-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 539.729616][ T3008] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 539.738712][ T3008] usb 2-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 539.751040][ T3008] usb 2-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 539.762042][ T3008] usb 2-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 539.772791][ T3008] usb 2-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 539.865060][ T3008] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 539.884707][ T3008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 539.894786][ T3008] usb 2-1: SerialNumber: syz [ 539.911271][T15881] usb 1-1: Using ep0 maxpacket: 8 [ 539.958522][T15958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.968640][T15958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.001904][ T3008] hub 2-1:5.0: bad descriptor, ignoring hub [ 540.007937][ T3008] hub: probe of 2-1:5.0 failed with error -5 [ 540.091393][ T7] usb 4-1: USB disconnect, device number 27 [ 540.108609][T15967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.138755][T15967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.319543][ C1] usblp0: nonzero read bulk status received: -71 [ 540.352652][T15958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.362347][T15958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.418760][ T17] usb 1-1: USB disconnect, device number 16 [ 540.434831][ T17] usblp0: removed [ 540.598976][T15958] udc-core: couldn't find an available UDC or it's busy [ 540.608119][T15958] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 540.646082][ T3008] usblp 2-1:5.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:46:54 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x738, 0x1705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xffff, 0x20, 0x1, {0x22, 0x1f1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x40, 0x2, 0x3, 0x40, 0x9b}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x3, [@generic={0x30, 0x10, 0x4, "c0ec0d3ce64e0dc09d609ed7042bc2a44b05c3909ce4510f24e44b07d8361ecb5ffaf872862d64e891013e449e"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x89, &(0x7f0000000180)=@string={0x89, 0x3, "5c67a57fb1dbbf0ddcb0ae73089a72a9284fe8d77f7ce6060a10b84286ade0f20ca2dac47669ddf9dc8f0df16741f18c3be740caacfd54ea2dfedbd7cd3596f757812db9e34b231201dabfc6a23677bb8f9e825683212ec63a1399726e6ea794bdebf22b8afef30b3d3e41aa855f6c6b7bda03e8fa0badf158739c64d01d4fdac85cc116e8810b"}}, {0x29, &(0x7f0000000240)=@string={0x29, 0x3, "22f8f3d9e40501de39b34e6d3099b858d7a05fab158af38d2ebacf4579f064dcd9475ba3132ba9"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "966a423a40973158968c29f95d76f42a847ff4a42ebe6265db8321ad7bcaf219a54cb753d446459085a1841be40c5b3c6a508fef25f2b814e00e95c920fd61c7aaaa17eb6b7d13a287dba8df59498db825b0578296cc91b018d2fc642630a28c94a504669df56d71ca26aa7d38f5b62cef6e9d73bcb7103efe3af676426b49c756be7fef5cabc8e681fa19bea4d1ee65510b8c8574adf860aad9c03c0e89321fd1b4bec4f831d6539b76a7e121ffbf81ec89bda77f2a7d98fcfe9d719d533e733b3e1a64d4c8dc94b819966827dcb4a5d5a8183b99c99b638e0ae36d69ae"}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "5d812c873161e8422e8d79b1d4a79cea45487bf7bc7d31a16562f369e9e8cf3d5fe56a5fdfcce8a5eb41668ec1"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$batadv(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$caif_stream(0x25, 0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 13:46:54 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xc0fe, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:54 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:46:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:46:54 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:54 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 541.329497][ T9818] usb 4-1: new high-speed USB device number 28 using dummy_hcd 13:46:54 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 541.509465][ T17] usb 1-1: new high-speed USB device number 17 using dummy_hcd 13:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xfc00, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:46:54 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:46:54 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) [ 541.739389][ T9818] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 541.748477][ T9818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.756973][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 541.792733][ T9818] usb 4-1: config 0 descriptor?? [ 541.920328][ T17] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 541.928705][ T17] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 542.009777][ T17] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 542.018972][ T17] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 542.076466][ T17] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 542.127964][ T17] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 542.158400][ T9818] kaweth 4-1:0.0: Firmware present in device. [ 542.180842][ T17] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 542.360102][ T9818] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 542.368849][ T9818] kaweth: probe of 4-1:0.0 failed with error -5 [ 542.379347][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 542.388504][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 542.441832][ T17] usb 1-1: SerialNumber: syz [ 542.688653][T15958] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 542.694537][T16019] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.788320][T16019] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.814629][ T17] hub 1-1:5.0: bad descriptor, ignoring hub [ 542.821322][ T17] hub: probe of 1-1:5.0 failed with error -5 [ 543.035559][T16019] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 543.051395][T16019] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 543.314450][T16019] udc-core: couldn't find an available UDC or it's busy [ 543.332138][T16019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 544.014998][ T9814] usb 4-1: USB disconnect, device number 28 [ 548.078697][T15958] usb 2-1: device descriptor read/64, error -110 [ 548.362293][T15958] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 548.549391][T15958] usb 2-1: device descriptor read/64, error -32 [ 548.850085][T15958] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 548.968749][T15958] usb 2-1: device descriptor read/8, error -32 [ 549.238592][T15958] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 549.350171][T15958] usb 2-1: device descriptor read/8, error -32 [ 549.483877][ T3008] usb 2-1: USB disconnect, device number 14 [ 549.496894][ T17] usblp 1-1:5.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 549.520266][ T3008] usblp0: removed [ 549.688428][ T3008] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 549.711341][ T17] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 549.888372][ T3008] usb 2-1: device descriptor read/64, error -32 [ 550.170605][ T3008] usb 2-1: new high-speed USB device number 16 using dummy_hcd 13:47:03 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:03 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xfe80, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:47:03 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:47:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:47:03 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:47:03 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 550.588614][ T3199] usb 4-1: new high-speed USB device number 29 using dummy_hcd 13:47:03 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:04 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 550.900008][ T17] usb 1-1: USB disconnect, device number 17 [ 550.929210][ T17] usblp1: removed [ 550.949920][ T3199] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 550.967753][ T3199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.991951][ T3199] usb 4-1: config 0 descriptor?? 13:47:04 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xfec0, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 551.300243][ T3199] kaweth 4-1:0.0: Firmware present in device. 13:47:04 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 551.488203][ T3199] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 551.506498][ T3199] kaweth: probe of 4-1:0.0 failed with error -5 13:47:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff, 0x1, 0x0, 0xc, 0x3, 0x79}, &(0x7f0000000140)=0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000120000", @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x0, 0xe}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000000), 0xb, 0x0) 13:47:05 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xff00, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 552.415871][T16172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:47:06 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:47:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:47:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x10981, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$vcsa(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00d00, 0x4, 0x0, 0x0, 0x2000000000002) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) dup(0xffffffffffffffff) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000011}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000021401002dbd7000fcdbdf250900020073797a300000000008004400", @ANYRES32, @ANYBLOB="080000080dbbf500"], 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) 13:47:06 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:06 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket(0x2, 0x80805, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1900) perf_event_open(&(0x7f00000003c0)={0x0, 0xb4, 0x6, 0x4, 0x3, 0x1, 0x0, 0x0, 0x5d201, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x4, 0xc, 0xa, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1f}]}, 0x80}}, 0x20004040) fcntl$setstatus(r1, 0x4, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="2900000059087b7a76c2934700086ddfe8f67cec43c1bd14194b02a9bbca8b794005663faff10000000000000000"], &(0x7f0000000500)=0x31) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x401000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, @tid=r2}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 13:47:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x40000, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 553.350663][ T7] usb 4-1: USB disconnect, device number 29 [ 553.476286][T16223] mmap: syz-executor.0 (16223) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 13:47:06 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:07 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 553.841633][ T7] usb 4-1: new high-speed USB device number 30 using dummy_hcd 13:47:07 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:47:07 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800130800fb8d5d4d98c3c285e1002004000004080005"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="6b2554cb6edfe23edf3397715c9341c2664ca8eec6456b50f7f8dd8b715415a9c3764ae17dd74d6274181c", 0x2b}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) [ 554.238727][ T7] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 554.256189][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.288767][ T7] usb 4-1: config 0 descriptor?? 13:47:07 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:47:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x3665c4, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 554.578915][ T7] kaweth 4-1:0.0: Firmware present in device. [ 554.777733][ T7] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 554.786524][ T7] kaweth: probe of 4-1:0.0 failed with error -5 [ 555.184384][T16262] device geneve2 entered promiscuous mode 13:47:09 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:47:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:47:09 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket(0x2, 0x80805, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1900) perf_event_open(&(0x7f00000003c0)={0x0, 0xb4, 0x6, 0x4, 0x3, 0x1, 0x0, 0x0, 0x5d201, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x4, 0xc, 0xa, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1f}]}, 0x80}}, 0x20004040) fcntl$setstatus(r1, 0x4, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="2900000059087b7a76c2934700086ddfe8f67cec43c1bd14194b02a9bbca8b794005663faff10000000000000000"], &(0x7f0000000500)=0x31) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x401000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, @tid=r2}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 13:47:09 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x80002, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e5d, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r1, 0x89dc, &(0x7f0000000540)="ad24bf4803d8322a35bdc6f70d3c7aeb11f9daa1e562ad132175e036bf08fc89bd463aadb2f0c1ec396ae9ce33d66db1fe0b5a20622cf5c743c4d526bcd7bfe8f1ac2fab8797d59b5da72f939996d1898a5ce6077216e312ee264dc6065a1e3295d08ef68641c83cd7d8a969516f49ea26abc8c2aff289ba9d9cd6ec3724a7c4a42a4d71aeffab3d9a09d5304cad5868f27e711f31254ceeef6f72e5884024d76757d3351c2e87caabf1b76b9055fa22193cc06125944ca2193b4733b78b0399dcff4815aa0a5bcf8b1c51338033cecaaec48664a1f9b72ba876597fd54a56fdae644c9b2e0565b1c04c816138641edf7c4f0ec055") clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = dup(r1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000800)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2c0800, 0x0) getrandom(&(0x7f0000000240)=""/77, 0x4d, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x741000, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r5 = accept4(r0, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x180800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000480)=0x5a, &(0x7f00000004c0)=0x4) 13:47:09 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:47:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x1000000, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 556.464685][ T3199] usb 4-1: USB disconnect, device number 30 13:47:10 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:47:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x3000000, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 557.007566][ T3199] usb 4-1: new high-speed USB device number 31 using dummy_hcd 13:47:10 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x80002, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e5d, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r1, 0x89dc, &(0x7f0000000540)="ad24bf4803d8322a35bdc6f70d3c7aeb11f9daa1e562ad132175e036bf08fc89bd463aadb2f0c1ec396ae9ce33d66db1fe0b5a20622cf5c743c4d526bcd7bfe8f1ac2fab8797d59b5da72f939996d1898a5ce6077216e312ee264dc6065a1e3295d08ef68641c83cd7d8a969516f49ea26abc8c2aff289ba9d9cd6ec3724a7c4a42a4d71aeffab3d9a09d5304cad5868f27e711f31254ceeef6f72e5884024d76757d3351c2e87caabf1b76b9055fa22193cc06125944ca2193b4733b78b0399dcff4815aa0a5bcf8b1c51338033cecaaec48664a1f9b72ba876597fd54a56fdae644c9b2e0565b1c04c816138641edf7c4f0ec055") clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = dup(r1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000800)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2c0800, 0x0) getrandom(&(0x7f0000000240)=""/77, 0x4d, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x741000, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r5 = accept4(r0, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x180800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000480)=0x5a, &(0x7f00000004c0)=0x4) [ 557.368577][ T3199] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 557.393505][ T3199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.445488][ T3199] usb 4-1: config 0 descriptor?? [ 557.741029][ T3199] kaweth 4-1:0.0: Firmware present in device. 13:47:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xc4653600, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:47:11 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket(0x2, 0x80805, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1900) perf_event_open(&(0x7f00000003c0)={0x0, 0xb4, 0x6, 0x4, 0x3, 0x1, 0x0, 0x0, 0x5d201, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x4, 0xc, 0xa, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1f}]}, 0x80}}, 0x20004040) fcntl$setstatus(r1, 0x4, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="2900000059087b7a76c2934700086ddfe8f67cec43c1bd14194b02a9bbca8b794005663faff10000000000000000"], &(0x7f0000000500)=0x31) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x401000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, @tid=r2}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 557.938554][ T3199] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 557.948835][ T3199] kaweth: probe of 4-1:0.0 failed with error -5 13:47:11 executing program 0 (fault-call:7 fault-nth:0): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 558.514900][T16339] FAULT_INJECTION: forcing a failure. [ 558.514900][T16339] name failslab, interval 1, probability 0, space 0, times 1 [ 558.529775][T16332] device geneve2 entered promiscuous mode [ 558.542239][T16339] CPU: 0 PID: 16339 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 558.550691][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.560761][T16339] Call Trace: [ 558.564056][T16339] dump_stack+0x107/0x163 [ 558.568417][T16339] should_fail.cold+0x5/0x1f [ 558.573027][T16339] ? snd_pcm_oss_change_params_locked+0x1a0/0x3940 [ 558.579554][T16339] ? snd_pcm_oss_change_params_locked+0x1a0/0x3940 [ 558.586081][T16339] should_failslab+0x5/0x10 [ 558.590610][T16339] kmem_cache_alloc_trace+0x55/0x260 [ 558.595931][T16339] snd_pcm_oss_change_params_locked+0x1a0/0x3940 [ 558.602295][T16339] ? __mutex_lock+0x61b/0x1110 [ 558.607121][T16339] ? kasan_save_stack+0x32/0x40 [ 558.611984][T16339] ? kasan_save_stack+0x1b/0x40 [ 558.616826][T16339] ? call_rcu+0xbb/0x710 [ 558.621066][T16339] ? snd_pcm_oss_make_ready+0xc7/0x1b0 [ 558.626558][T16339] ? syscall_exit_to_user_mode+0x19/0x50 [ 558.632212][T16339] ? snd_pcm_plugin_append+0x190/0x190 [ 558.637681][T16339] ? mutex_lock_io_nested+0xf60/0xf60 [ 558.643061][T16339] ? lock_downgrade+0x6d0/0x6d0 [ 558.647909][T16339] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 558.653751][T16339] ? lockdep_hardirqs_on+0x79/0x100 [ 558.658957][T16339] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 558.665199][T16339] ? __fsnotify_parent+0x488/0x9d0 [ 558.670299][T16339] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 558.675573][T16339] snd_pcm_oss_sync+0x2e0/0x800 [ 558.680441][T16339] snd_pcm_oss_release+0x276/0x300 [ 558.685540][T16339] __fput+0x283/0x920 [ 558.689510][T16339] ? snd_pcm_oss_sync+0x800/0x800 [ 558.694522][T16339] task_work_run+0xdd/0x190 [ 558.699158][T16339] exit_to_user_mode_prepare+0x1f0/0x200 [ 558.704791][T16339] syscall_exit_to_user_mode+0x19/0x50 [ 558.710241][T16339] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.716180][T16339] RIP: 0033:0x45e149 [ 558.720112][T16339] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 558.739779][T16339] RSP: 002b:00007f7071389c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 558.748184][T16339] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 000000000045e149 [ 558.756138][T16339] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 558.764092][T16339] RBP: 00007f7071389ca0 R08: 0000000000000000 R09: 0000000000000000 [ 558.772046][T16339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.780043][T16339] R13: 00000000016afb7f R14: 00007f707138a9c0 R15: 000000000119c034 13:47:12 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000104000000ffffff0000b2780004", @ANYRES32=r3, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="800080c000000000000010004be1002c0065000009009078ac141410e0000001070f716401010000000000e000000289088bd19217d52800"]}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x81f70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/174, 0xae, 0xfffffffffffffbff, &(0x7f0000000080)) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 13:47:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x84, 0xa4, 0x4f, 0x40, 0x951, 0x8, 0x6f25, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x45, 0xee}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13:47:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xfc000000, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:47:12 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x5d3fbfeab06ada4b, 0x800001) dup(0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x349841, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r0], 0x14) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) getsockopt$inet_int(r1, 0x0, 0xb, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x403, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x2}, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x0, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x2, 0x46a, 0x2d4, 0x0, 0x81, 0x0, 0x23f}) sendmmsg(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x228081, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="4d28a31bd9eed88b003ffdc5345f560240a57a6f83bb3f0700a8cb253e1c036f40a4df9965686c1f000000000000000028e31526d0268b51bf78f2a122e909431e64adc82fd0016f1f6534b3243ad63bf90c7d916f00b10000000000002f0565f145bcb6fd02f358df6f409492312b57a3657b8c086fd1b7c0d51cc3d601430c2af6b64f6e06c84760ebd6ad1e2732cba649e1852e755a290600f75c994696ba03069988cf40ac685f216ea189ad39c795c5beb9227dbf8c94348914db0f0b77c0684b00"], 0xffffffffffffff59) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) [ 559.606926][ T7] usb 4-1: USB disconnect, device number 31 13:47:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffff7fffd, 0x86}, 0x1180, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x80, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x2, 0x0, &(0x7f0000000640)=""/170, 0x0, 0x3000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=0x0) r1 = socket$inet(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x10d, 0xd, 0x0, 0x10) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000200)=""/252, &(0x7f00000000c0)=0xfc) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x9) sendto$inet6(r3, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @private0={0xfc, 0x0, [], 0x1}, 0x900}, 0x1c) 13:47:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x2) [ 560.097861][ T7] usb 4-1: new high-speed USB device number 32 using dummy_hcd 13:47:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x3) [ 560.499171][ T7] usb 4-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=6f.25 [ 560.509762][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.531265][ T7] usb 4-1: config 0 descriptor?? 13:47:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x4) 13:47:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0xfcffffff, 0x0, 0x40000000}}], 0x400000000000034, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:47:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x5) [ 560.905881][ T7] kaweth 4-1:0.0: Firmware present in device. [ 561.027021][ T7] kaweth 4-1:0.0: Error reading configuration (-32), no net device created 13:47:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x88542, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x6) [ 561.084374][ T7] kaweth: probe of 4-1:0.0 failed with error -5 [ 561.199997][T16402] ================================================================== [ 561.208631][T16402] BUG: KASAN: null-ptr-deref in filp_close+0x22/0x170 [ 561.215423][T16402] Read of size 8 at addr 0000000000000077 by task syz-executor.0/16402 [ 561.223673][T16402] [ 561.226000][T16402] CPU: 0 PID: 16402 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 561.234421][T16402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.244510][T16402] Call Trace: [ 561.247799][T16402] dump_stack+0x107/0x163 [ 561.252149][T16402] ? filp_close+0x22/0x170 [ 561.256585][T16402] ? filp_close+0x22/0x170 [ 561.261014][T16402] kasan_report.cold+0x5/0x37 [ 561.265716][T16402] ? filp_close+0x22/0x170 [ 561.270169][T16402] check_memory_region+0x13d/0x180 [ 561.275297][T16402] filp_close+0x22/0x170 [ 561.279559][T16402] put_files_struct+0x1cc/0x350 [ 561.284444][T16402] exit_files+0x12a/0x170 [ 561.288916][T16402] do_exit+0xb4f/0x2a00 [ 561.293098][T16402] ? find_held_lock+0x2d/0x110 [ 561.297884][T16402] ? mm_update_next_owner+0x7a0/0x7a0 [ 561.303278][T16402] ? get_signal+0x2f4/0x2160 [ 561.307889][T16402] ? lock_downgrade+0x6d0/0x6d0 [ 561.312769][T16402] do_group_exit+0x125/0x310 [ 561.317387][T16402] get_signal+0x3e9/0x2160 [ 561.321833][T16402] ? __might_fault+0xd3/0x180 [ 561.326542][T16402] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 561.332289][T16402] ? _copy_to_user+0xdc/0x150 [ 561.336993][T16402] ? copy_siginfo_to_user32+0xa0/0xa0 [ 561.342384][T16402] ? __x64_sys_futex+0x3be/0x5e0 [ 561.347341][T16402] ? __x64_sys_futex+0x3c8/0x5e0 [ 561.352319][T16402] ? do_futex+0x1980/0x1980 [ 561.356851][T16402] exit_to_user_mode_prepare+0x124/0x200 [ 561.362500][T16402] syscall_exit_to_user_mode+0x19/0x50 [ 561.367975][T16402] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 561.373887][T16402] RIP: 0033:0x45e149 [ 561.377802][T16402] Code: Unable to access opcode bytes at RIP 0x45e11f. [ 561.384735][T16402] RSP: 002b:00007f70713aacf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.393166][T16402] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e149 [ 561.401147][T16402] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 561.409138][T16402] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 561.417122][T16402] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 561.425187][T16402] R13: 00000000016afb7f R14: 00007f70713ab9c0 R15: 000000000119bf8c [ 561.433206][T16402] ================================================================== [ 561.441265][T16402] Disabling lock debugging due to kernel taint [ 561.469206][T16402] Kernel panic - not syncing: panic_on_warn set ... [ 561.475828][T16402] CPU: 0 PID: 16402 Comm: syz-executor.0 Tainted: G B 5.10.0-syzkaller #0 [ 561.485632][T16402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.495696][T16402] Call Trace: [ 561.498982][T16402] dump_stack+0x107/0x163 [ 561.503385][T16402] panic+0x343/0x77f [ 561.507298][T16402] ? __warn_printk+0xf3/0xf3 [ 561.511895][T16402] ? preempt_schedule_common+0x59/0xc0 [ 561.517356][T16402] ? filp_close+0x22/0x170 [ 561.521735][T16380] IPVS: ftp: loaded support on port[0] = 21 [ 561.521774][T16402] ? preempt_schedule_thunk+0x16/0x18 [ 561.532997][T16402] ? trace_hardirqs_on+0x38/0x1c0 [ 561.538058][T16402] ? trace_hardirqs_on+0x51/0x1c0 [ 561.543180][T16402] ? filp_close+0x22/0x170 [ 561.547605][T16402] ? filp_close+0x22/0x170 [ 561.552026][T16402] end_report+0x58/0x5e [ 561.556199][T16402] kasan_report.cold+0xd/0x37 [ 561.560887][T16402] ? filp_close+0x22/0x170 [ 561.565311][T16402] check_memory_region+0x13d/0x180 [ 561.570444][T16402] filp_close+0x22/0x170 [ 561.574698][T16402] put_files_struct+0x1cc/0x350 [ 561.579567][T16402] exit_files+0x12a/0x170 [ 561.583910][T16402] do_exit+0xb4f/0x2a00 [ 561.588081][T16402] ? find_held_lock+0x2d/0x110 [ 561.592846][T16402] ? mm_update_next_owner+0x7a0/0x7a0 [ 561.598235][T16402] ? get_signal+0x2f4/0x2160 [ 561.602830][T16402] ? lock_downgrade+0x6d0/0x6d0 [ 561.607686][T16402] do_group_exit+0x125/0x310 [ 561.612277][T16402] get_signal+0x3e9/0x2160 [ 561.616701][T16402] ? __might_fault+0xd3/0x180 [ 561.621389][T16402] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 561.627149][T16402] ? _copy_to_user+0xdc/0x150 [ 561.631840][T16402] ? copy_siginfo_to_user32+0xa0/0xa0 [ 561.637232][T16402] ? __x64_sys_futex+0x3be/0x5e0 [ 561.642179][T16402] ? __x64_sys_futex+0x3c8/0x5e0 [ 561.647129][T16402] ? do_futex+0x1980/0x1980 [ 561.651643][T16402] exit_to_user_mode_prepare+0x124/0x200 [ 561.657282][T16402] syscall_exit_to_user_mode+0x19/0x50 [ 561.662760][T16402] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 561.668661][T16402] RIP: 0033:0x45e149 [ 561.672561][T16402] Code: Unable to access opcode bytes at RIP 0x45e11f. [ 561.679412][T16402] RSP: 002b:00007f70713aacf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.687828][T16402] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e149 [ 561.695806][T16402] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 561.703778][T16402] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 561.711859][T16402] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 561.719832][T16402] R13: 00000000016afb7f R14: 00007f70713ab9c0 R15: 000000000119bf8c [ 561.728384][T16402] Kernel Offset: disabled [ 561.732730][T16402] Rebooting in 86400 seconds..